FAQ for the planned Python Institute PCAS associate security credential and early preparation strategy.
No. Python Institute currently lists PCAS-31-0x: Certified Associate Security Specialist with Python as work in progress on its certification roadmap.
No. Use this guide as early preparation only. The final exam page may change objectives, delivery details, pricing, duration, and release timing.
PCES is the entry-level security credential. PCAS is expected to move closer to applied secure coding and defensive automation: stronger input handling, secrets, dependency risk, file safety, logging, and evidence preservation.
Reduce trust. Treat input, files, environment variables, logs, dependencies, and internal services as potential risk boundaries until the program validates them and limits what they can affect.
Start with one script that reads external input. Add allowlisted validation, safe error messages, secret redaction, and a clear log record for accepted, rejected, and failed operations.
Printing secrets or internal details while debugging. Debug output often becomes logs, tickets, screenshots, or chat messages. A secure script should preserve useful evidence without exposing credentials or sensitive data.