Certified DevSecOps Professional
The Certified DevSecOps Professional (CDP) is a practitioner-level certification in DevSecOps issued by Practical DevSecOps, a subsidiary of HYSN Technologies Inc. The certification evaluates competency in integrating security practices into continuous integration and continuous delivery (CI/CD) pipelines and is listed in the CISA national training catalog.
Issuing organization
Practical DevSecOps is operated by HYSN Technologies Inc., incorporated in Delaware with offices in Newark, New Jersey, and Singapore. The company was founded by Mohammed A. Imran, a security professional who delivered training at Black Hat USA 2018 titled "Practical DevSecOps: Continuous Security in the Age of Cloud."[1] Practical DevSecOps instructors have also delivered training at Hack In The Box (HITB) international security conferences, including HITBSecConf Singapore and HITB CyberWeek.[2][3]
Certification
The CDP is included in the Cybersecurity and Infrastructure Security Agency (CISA) National Initiative for Cybersecurity Careers and Studies (NICCS) training catalog.[4] TechTarget's SearchSecurity listed the CDP among recommended DevSecOps certifications for cybersecurity professionals, alongside offerings from DevOps Institute, EXIN, and EC-Council.[5]
Exam format
The CDP exam consists of five scenario-based challenges administered within a 12-hour hands-on window, followed by a 24-hour period for report submission. Candidates must achieve a minimum score of 80% to pass. The examination contains no multiple-choice questions; performance is assessed entirely within a live lab environment.[6]
Course curriculum
The preparatory course covers nine modules including CI/CD pipeline security, static application security testing (SAST), dynamic application security testing (DAST), infrastructure as code (IaC), compliance as code (CaC), software composition analysis (SCA), and vulnerability management.[6] The certification carries no expiration date and does not require periodic recertification.[6]
See also
- DevSecOps
- List of computer security certifications
- Certified Ethical Hacker
- CI/CD
References
- ↑ "Practical DevSecOps – Continuous Security in the Age of Cloud". Black Hat. Retrieved 2026-06-18.
- ↑ "Mohammed A. Imran – HITBSecTrain". Hack In The Box. Retrieved 2026-06-18.
- ↑ "Secure Coding and DevSecOps – HITB CyberWeek 2020". HITBSecTrain. Retrieved 2026-06-18.
- ↑ "Certified DevSecOps Professional (CDP) – NICCS Training Catalog". National Initiative for Cybersecurity Careers and Studies, Cybersecurity and Infrastructure Security Agency. Retrieved 2026-06-18.
- ↑ "Top DevSecOps certifications and trainings". SearchSecurity. TechTarget. Retrieved 2026-06-18.
- ↑ 6.0 6.1 6.2 "Certified DevSecOps Professional (CDP)". Practical DevSecOps. Retrieved 2026-06-18.
Category:Computer security certifications Category:DevOps Category:Professional certifications in computing
This article "Certified DevSecOps Professional" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:Certified DevSecOps Professional. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
