Awarded for completing Annual Secure Development Training for Developers and passing its exam, demonstrating working knowledge of parameterised queries and untrusted input handling, server side object level authorisation, secret handling and the rotate first response to an exposed credential, deliberate dependency selection and update, error handling and logging that neither leak internals nor capture credentials or personal data, and the review standard for code produced by a coding assistant. Completion is recorded and the certificate identifier is verifiable; acceptance as evidence for any control remains a decision for the auditor and the framework.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
