Awarded for completing The CWE Top 25: Cryptography and Secrets Weaknesses and passing its exam, demonstrating the ability to recognise, detect, fix and systemically prevent the cryptography and secrets handling weaknesses that recur most often in real-world software.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
