The bearer of this certificate earned 300 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.

Joshua Gibbons
2a056f7821
03 Apr 2023
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| Can you see your reflection? [DEPRECATED] | OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] | 10 | |
| One ID to Access All Objects [DEPRECATED] | OWASP 2019 API 1: Broken Object Level Authorization [DEPRECATED] | 10 | |
| Can you see your reflection? [DEPRECATED] | OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] | 10 | |
| Slow Down [DEPRECATED] | OWASP 2017 A10: Insufficient Logging + Monitoring [DEPRECATED] | 10 | |
| Really, really bad passwords [DEPRECATED] | OWASP 2019 API 2: Broken User Authentication [DEPRECATED] | 10 | |
| Bugs in Debug [DEPRECATED] | OWASP 2019 API 3: Excessive Data Exposure [DEPRECATED] | 10 | |
| To Protect and To Serve Secure Cookies | OWASP 2021 A1: Broken Access Control [DEPRECATED] | 20 | |
| Sleeping With the Enemy | OWASP 2021 A8: Software and Data Integrity Failures [DEPRECATED] | 10 | |
| Jot down this key [DEPRECATED] | OWASP 2019 API 7: Security Misconfiguration [DEPRECATED] | 10 | |
| eXternal Entity (injection) [DEPRECATED] | OWASP 2019 API 7: Security Misconfiguration [DEPRECATED] | 10 | |
| To Protect and To Serve Secure Cookies | OWASP 2021 A1: Broken Access Control [DEPRECATED] | 20 | |
| To Protect and To Serve Secure Cookies | OWASP 2021 A1: Broken Access Control [DEPRECATED] | 20 | |
| Bugs in Debug | OWASP 2021 A2: Cryptographic Failures [DEPRECATED] | 10 | |
| Own the Database | OWASP 2021 A3: Injection [DEPRECATED] | 10 | |
| Parameterize all the things | OWASP 2021 A3: Injection [DEPRECATED] | 10 | |
| Can you see your reflection? | OWASP 2021 A3: Injection [DEPRECATED] | 10 | |
| Down with Uploads | OWASP 2021 A3: Injection [DEPRECATED] | 20 | |
| Stored XSS versus CSP | OWASP 2021 A3: Injection [DEPRECATED] | 20 | |
| Suspicious Packages | OWASP 2021 A6: Vulnerable and Outdated Components [DEPRECATED] | 10 | |
| Really, really bad passwords | OWASP 2021 A7: Identification and Authentication Failures [DEPRECATED] | 10 | |
| In a Pickle | OWASP 2021 A8: Software and Data Integrity Failures [DEPRECATED] | 10 | |
| Slow Down | OWASP 2021 A9: Security Logging and Monitoring Failures [DEPRECATED] | 10 | |
| To Protect and To Serve Secure Cookies | OWASP 2021 A1: Broken Access Control [DEPRECATED] | 10 | |
| Making Secure Decisions | OWASP 2021 A4: Insecure Design [DEPRECATED] | 10 | |
| Valid Deficit | OWASP 2021 A4: Insecure Design [DEPRECATED] | 10 |