My Journey to API Security: Earning CASA & ACP Certifications
API security is one of those domains where theory alone is never enough — you need structured learning, real-world examples, and constant…
My Journey to API Security: Earning CASA & ACP Certifications
API security is one of those domains where theory alone is never enough — you need structured learning, real-world examples, and constant practice. Recently, I completed both the Certified API Security Analyst (CASA) and APIsec Certified Practitioner (ACP) certifications from APIsec University. This blog is a reflection of my experience, what I learned, and how I approached the preparation.
Why I Chose API Security
Modern applications rely heavily on APIs. Whether it’s mobile apps, SaaS platforms, or microservices, APIs expose critical business logic and sensitive data. That also makes them a major target for attackers.
I wanted to strengthen my understanding of:
- Real-world API vulnerabilities
- OWASP API Top 10
- Authentication and authorization mechanisms
- Practical API security testing
That’s what led me to APIsec University.
My Learning Approach
Instead of just passively studying, I followed a more structured approach:
- Completed all core courses
- Created my own detailed notes (PDFs) made by AI
- Used AI to help expand and structure concepts
- Focused on understanding patterns, not memorizing answers
I built four main reference PDFs covering:
- Securing API Servers
- OWASP API Security Top 10
- API Documentation Best Practices
- API Authentication
These notes became my primary revision resource before the exam.
Key Takeaways
- API security is logic-driven, not tool-driven
- OWASP API Top 10 is the core foundation
- Documentation, authentication, and server security are deeply connected
- Practice and structured notes make a big difference
One of the most valuable parts of my preparation was creating structured notes from everything I learned. Instead of keeping them private, I’ve decided to share these PDFs publicly so others can benefit from them as well.
These PDFs are meant for learning and educational purposes only. They should be used to understand concepts — not as a shortcut to skip learning.
View More Certifications
I’ve documented all my certifications, including CASA and ACP, on my portfolio website.
You can explore them here: 👉 https://arittro-sarkar.me/certificate
메타데이터
- post_id
- b3a3f2cc1371
- slug
- my-journey-to-api-security-earning-casa-acp-certifications-b3a3f2cc1371
- url
- https://medium.com/@arittroskr/my-journey-to-api-security-earning-casa-acp-certifications-b3a3f2cc1371
- canonical_url
- https://medium.com/@arittroskr/my-journey-to-api-security-earning-casa-acp-certifications-b3a3f2cc1371
- author_url
- https://medium.com/@arittroskr
- status
- ok
- fetched_at
- 2026-06-10 08:17:25
