Awarded for completing GraphQL API Security and passing its exam, demonstrating the ability to reason about a GraphQL schema's attack surface, apply query complexity and depth controls, enforce field-level authorization, configure introspection safely, close batching-based rate-limiting gaps, handle errors without information disclosure, and evaluate persisted query allow-listing for a given client population.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
