The bearer of this certificate earned 300 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
Arno Wilhelm
5a44c4cf4a
19 Oct 2026
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| One ID to Access All Objects | OWASP API 1: Broken Object Level Authorization |  .NET | 10 |
| Terrible Password Challenge | OWASP API 2: Broken Authentication |  NodeJS | 10 |
| Stronger IDs | OWASP API 1: Broken Object Level Authorization | .NET | 10 |
| Really, really bad passwords | OWASP API 2: Broken Authentication | .NET | 10 |
| Retrieval Without Validation | OWASP API 7: Server-Side Request Forgery [SSRF] | .NET | 10 |
| The Great Referral Quest | OWASP API 6: Unrestricted Access to Sensitive Business Flows | NodeJS | 10 |
| Slow Down | OWASP API 2: Broken Authentication | .NET | 10 |
| Brute Force Challenge | OWASP API 2: Broken Authentication | .NET | 10 |
| Bugs in Debug | OWASP API 3: Broken Object Property Level Authorization | .NET | 10 |
| Revealing Schemas | OWASP API 3: Broken Object Property Level Authorization | .NET | 10 |
| Bad Design Compromises Security | OWASP API 3: Broken Object Property Level Authorization | .NET | 10 |
| Denial of Service | OWASP API 4: Unrestricted Resource Consumption | .NET | 10 |
| Neglected endpoints | OWASP API 5: Broken Function Level Authorization | .NET | 10 |
| Unprotected Deployments | OWASP API 9: Improper Inventory Management | .NET | 10 |
| Secret Admin Challenge | OWASP API 8: Security Misconfiguration | .NET | 10 |
| eXternal Entity (injection) | OWASP API 8: Security Misconfiguration | .NET | 10 |
| Jot down this key | OWASP API 8: Security Misconfiguration | .NET | 10 |
| Gift Cards at Risk | OWASP API 10: Unsafe Consumption of APIs | .NET | 10 |
| Lesson Zero | Security Labs – Getting Started |  Java | 10 |
| Lesson Zero | Security Labs – Getting Started | NodeJS | 10 |
| Lesson Zero | Security Labs – Getting Started | .NET | 10 |
| Lesson Zero | Security Labs – Getting Started |  Golang | 10 |
| Lesson Zero | Security Labs – Getting Started |  Python Django | 10 |
| Lesson Zero | Security Labs – Getting Started |  Python Flask | 10 |
| To Protect and to Serve Secure Cookies | OWASP 1: Broken Access Control | Python Django | 20 |
| Loose Lips Sink Servers | OWASP 1: Broken Access Control | .NET | 10 |
| Fix the Sessions | OWASP 1: Broken Access Control | Java | 10 |
| XML is always a Challenge | OWASP API 8: Security Misconfiguration | .NET | 10 |
| Bad Cookie Challenge | OWASP 1: Broken Access Control | NodeJS | 10 |