Attacking and Securing CI/CD Pipeline certification
Certification Overview
The Attacking and Securing CI/CD Pipeline certification validates your ability to identify, assess, and mitigate real-world security risks within software development pipelines. It demonstrates that you have hands-on experience with popular CI/CD tools including GitHub Actions, CircleCI, Docker, Kubernetes, Azure DevOps, and AWS CodeBuild and that you can effectively recognize how threats emerge and apply defensive engineering techniques to safeguard these environments. Earning this certification also confirms your practical proficiency in responding to attack scenarios, adapting to evolving risks, and maintaining secure pipeline operations independently and flexibly.
What’s Included with the Certification Course?
- Comprehensive training materials, including lab guides and video walkthroughs.
- One free exam voucher to attempt the ASCPC certification exam, valued at $100.
- Access to an exclusive lab environment for practical, hands-on experience.
Purchase the Certification Course here:
Exam-Only Option
You don’t need to purchase the full course to take the ASCPC certification exam! Experienced professionals can purchase a standalone exam voucher and attempt the certification directly.
Benefits of the Exam-Only Option:
- Direct access to the live exam environment for 48 hours.
- Same exam challenges and scoring criteria as the full certification course.
- Demonstrate your skills without enrolling in the course.
Purchase Standalone Exam Voucher here:
Retake Policy
If you don’t pass the exam on your first attempt, you can retake it by purchasing a retake voucher for $100. This allows you to reset the exam environment and try again under the same rules.
How to Retake:
- Visit the [Exam Voucher Purchase Page]
- Purchase your $100 retake voucher.
- Reset your exam environment within 24 hours.
- Restart your exam directly from the student portal.
Exam Details
The ASCPC certification exam is a rigorous, hands-on evaluation of advanced offensive security skills. It simulates a real-world environment with 12 objectives across 4 machines, requiring expertise in bypassing defenses, achieving technical goals, and creating detailed documentation.
- Bypassing Advanced EDR/AV Solutions: Navigate enterprise-grade defenses.
- Executing Specific Attack Techniques: Develop payloads, inject code, or establish persistence mechanisms.
- Submitting Evidence of Success: Provide screenshots, code snippets, and thorough documentation of methods.
The live exam environment includes:
- Development Machine: Preconfigured for custom payload creation and testing.
- Cobalt Strike Server: Equipped with a custom profile for the exam.
- Guacamole Access: Web-based remote platform.
- RDP Access: Backup access for redundancy.
- Four Target Machines: Simulating enterprise environments with EDR/AV protections.
- Ensure stable and reliable internet connectivity.
- Verify access credentials for RDP/Guacamole.
- Confirm that compilers and IDEs are pre-installed and functional.
- Familiarize yourself with Cobalt Strike or a preferred C2 framework.
- Allocate sufficient uninterrupted time for the exam and reporting period.
Strategically allocate your time:
- Research and Preparation: 25% of the time.
- Exploitation and Objective Completion: 50% of the time.
- Documentation: 25% of the time.
Allowed and Prohibited Resources
Allowed:
- Custom scripts, public tools, and any scripting language.
- Internet resources for research and reference.
- Modifications to existing tools for objectives.
Prohibited:
- Collaboration or sharing solutions during the exam.
- Using prebuilt tools or scripts without demonstrating understanding.
Portal Usage Details
The student portal facilitates:
- File Uploads: Submit objectives, screenshots, and the final report.
- Submission Tracking: View and confirm completed objectives.
- Submission Review: Ensure files are correctly labeled and complete.
Submissions outside the portal are not accepted.
Scoring Criteria
Performance is evaluated based on:
- Technical Execution (70% of your total score)
- Challenge 1 (50%): Focus on successfully bypassing security measures and executing C2 beacons on all exam machines. This is the most critical challenge and carries the most weight.
- Challenge 2 (10%): Earn additional points by completing the second challenge on each exam machine.
- Challenge 3 (10%): Earn additional points by completing the third challenge on each exam machine.
- Documentation/Reporting (30% of your total score)
- Clarity and Detail (30%): Provide a clear and detailed explanation of the steps you took, including what you did and why it worked.
- Submit your code as proof of execution.
- Submission Requirement: You must submit a readable report to be considered for scoring.
- Key Points to Remember
- Focus on Challenge 1: This is the most important challenge and carries the most weight in your technical execution score.
- Complete All Challenges: While Challenge 1 is crucial, completing Challenges 2 and 3 will earn you additional points.
- Importance of Documentation: A well-written, clear, and detailed report is essential. It must include explanations of your actions, reasons for their success, and code as proof.
- Submission Requirement: Ensure your report is readable to receive full credit for the documentation component.
Certification Delivery
Upon passing the exam, candidates receive:
- Digital Certificate: Delivered via email within 10 business days.
- Verification: Certifications are verifiable for authenticity.
Frequently Asked Questions (F.A.Q)
1. How long is the exam live?
- The exam is live for 48 hours. No additional time will be granted. Candidates must manage their time effectively to complete all objectives
2. How long is the submission portal open?
- The submission portal is accessible for a total of 96 hours, starting from the scheduled exam time. This includes 48 hours for the technical portion and an additional 48 hours to upload objectives and the final exam report.
3. What format should submissions follow?
- The final report must follow this naming convention: ASCPC_Student_Name_Date.pdf The report must be archived into a .zip file before submission.
4. What tools can be used to create the zip file?
- Any standard compression tool is acceptable, such as:
- 7-Zip
- WinRAR
- macOS Finder’s built-in compression
- Linux’s zip command
5. Is encryption required for the zip file?
- No, encryption is not required. Simply compress the file and submit it through the portal.
6. Can custom loaders or C2 frameworks be used?
- Yes, custom loaders or C2 frameworks are permitted. However
- Loaders must simulate TCP connection over HTTP or HTTPS
- If Cobalt Strike beacons are not used, the loader code must be
- provided along with a detailed explanation of its functionality.
7. Can frameworks like Havoc or Mythic C2 be used?
- Yes, frameworks such as Havoc or Mythic C2 are allowed. The exam environment supports internet access, enabling candidates to use their preferred frameworks.
8. What happens if the exam is failed?
- A failed exam can be retaken by purchasing a new exam voucher for $100. After obtaining the voucher, the exam can be rescheduled through the portal.
9. What if machine defenses cannot be bypassed?
- In cases where defenses cannot be bypassed:
- Submit the report detailing all attempts and processes.
- Success is not solely based on bypassing but also on
- demonstrating understanding, effort, and creativity.
10. Do all objectives require advanced bypass techniques?
- No, not all objectives require sophisticated bypass techniques. Creative approaches and strong problem-solving skills are highly valued.
11. Are submitted code and bypass data secure?
- Yes, submitted data remains private and is not shared. However, the exam simulates real-world environments, and detection by AV/EDR systems cannot be guaranteed.
12. Is the ASCPC exam difficult?
- Absolutely. The exam is designed to challenge even seasoned professionals, requiring determination, technical expertise, and creativity to succeed.
13. Is collaboration allowed during the exam?
- No, collaboration or external assistance is strictly prohibited. The exam assesses individual skills and understanding.
14. Are extensions allowed if the exam cannot be completed on time?
- No, extensions are not permitted. The automated exam process enforces strict deadlines.
15. How is the certification delivered upon passing?
- Digital certificates are emailed within 10 business days. Ensure that the registered email address is accurate.
16. What happens if a scheduled exam is missed?
- Missed exams require purchasing a new voucher to reschedule. The automated process starts the exam at the scheduled time.
17. Can scheduled exams be canceled or rescheduled?
- No, once scheduled, exams cannot be canceled or rescheduled. The automated process does not allow for changes.
18. Are refunds available for unused vouchers?
- No, exam vouchers are non-refundable. Candidates should confirm readiness before purchasing.
19. Are there restrictions on tools used during the exam?
- No specific tools are required. Candidates may use any tools they are comfortable with, provided proper documentation and understanding are demonstrated.
20. Is there a limit or waiting period for retakes?
- No, there are no limits or waiting periods for retakes. Candidates may retake the exam as soon as a new voucher is purchased.
21. Is the certification verifiable?
- Yes, certifications are verifiable to ensure legitimacy and authenticity.
22. What does “using prebuilt solutions without demonstrating understanding” mean?
- This refers to using a tool or script without explaining its functionality. Candidates must:
- Clearly explain how the tool or script works.
- Document modifications made to adapt it to the exam environment.
- Highlight and comment on code changes.
- Provide a detailed explanation of the logic behind the approach.
- Failure to demonstrate understanding of tools or techniques will result in exam failure.
Purchase the ASCPC Exam Voucher for $100
Train with Confidence
White Knight Labs trains professionals who operate in production environments, mature defensive stacks, and regulated organizations.
If your goal is real offensive capability, not just a certificate, our training is built for you.
Quick Links
Contact
Services & Company Inquiries:
Student Support
(Billing, Labs, Content, Vouchers, Tickets):
Copyright © 2026 White Knight Labs – All rights reserved