The bearer of this certificate earned 200 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
Arno Wilhelm
2bdf02b6cf
29 Sep 2026
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| One ID to Access All Objects | OWASP API 1: Broken Object Level Authorization |  .NET | 10 |
| Terrible Password Challenge | OWASP API 2: Broken Authentication |  NodeJS | 10 |
| Stronger IDs | OWASP API 1: Broken Object Level Authorization | .NET | 10 |
| Really, really bad passwords | OWASP API 2: Broken Authentication | .NET | 10 |
| Retrieval Without Validation | OWASP API 7: Server-Side Request Forgery [SSRF] | .NET | 10 |
| The Great Referral Quest | OWASP API 6: Unrestricted Access to Sensitive Business Flows | NodeJS | 10 |
| Slow Down | OWASP API 2: Broken Authentication | .NET | 10 |
| Brute Force Challenge | OWASP API 2: Broken Authentication | .NET | 10 |
| Bugs in Debug | OWASP API 3: Broken Object Property Level Authorization | .NET | 10 |
| Revealing Schemas | OWASP API 3: Broken Object Property Level Authorization | .NET | 10 |
| Bad Design Compromises Security | OWASP API 3: Broken Object Property Level Authorization | .NET | 10 |
| Denial of Service | OWASP API 4: Unrestricted Resource Consumption | .NET | 10 |
| Neglected endpoints | OWASP API 5: Broken Function Level Authorization | .NET | 10 |
| Unprotected Deployments | OWASP API 9: Improper Inventory Management | .NET | 10 |
| Secret Admin Challenge | OWASP API 8: Security Misconfiguration | .NET | 10 |
| eXternal Entity (injection) | OWASP API 8: Security Misconfiguration | .NET | 10 |
| Jot down this key | OWASP API 8: Security Misconfiguration | .NET | 10 |
| Gift Cards at Risk | OWASP API 10: Unsafe Consumption of APIs | .NET | 10 |
| Lesson Zero | Security Labs – Getting Started |  Java | 10 |
| Lesson Zero | Security Labs – Getting Started | NodeJS | 10 |
| Lesson Zero | Security Labs – Getting Started | .NET | 10 |
| Lesson Zero | Security Labs – Getting Started |  Golang | 10 |
| Lesson Zero | Security Labs – Getting Started |  Python Django | 10 |
| Lesson Zero | Security Labs – Getting Started |  Python Flask | 10 |
| XML is always a Challenge | OWASP API 8: Security Misconfiguration | .NET | 10 |