Certified API Security Professional (CASP)

APIs now account for 80% of total Internet
traffic, from the cloud to your fridge. While APIs
bring new ways of developing and distributing
applications, they also introduce new ways for
malicious actors to attack enterprise systems.

In this course, you will learn how to identify
security issues in your APIs, mitigate them
with the proper security measures, and
design your APIs for maximum efficiency and
minimum exposure to risk. You will reinforce
your learning using theoretical lectures,
demos, quizzes, and secure design practices
with realistic case studies and 40+ hands-on
exercises.

You will start the course with API basics, core
components of API architecture, and ways
to interact with the APIs. Once you learn
the fundamentals, you will gain hands-on
experience with a series of realistic attack
scenarios like Server Side Request Forgery,
Broken Authentication, Broken Access Control
issues, Injection attacks, Privilege escalation,
and Security misconfigurations.

Developers, architects, and security
professionals tasked with designing and
building secure APIs will benefit immensely
from this course. This course imparts
professionals with deep knowledge of API
security, adopting modern security practices
and automation to secure APIs with appropriate
techniques, catching security issues before they
become critical, and alerting relevant engineers
in real-time.

The course also prepares you for the Practical
DevSecOps Certified API Security Professional
(CASP), a vendor-neutral certification program
designed to assess an IT professional's API
security expertise.