Official and stable preparation resources for the planned Python Institute PCAS associate security credential.
Use these resources while PCAS-31-0x: Certified Associate Security Specialist with Python remains work in progress.
| Resource | Use it for |
|---|---|
| Python Institute certification roadmap | Current PCAS status, credential name, exam family, and whether the active exam page exists. |
| Topic | What to review |
|---|---|
| Input validation | Type, length, format, range, allowlists, and reject paths. |
| Secrets | Environment handling, secret stores, redaction, rotation, and log hygiene. |
| File safety | Path traversal, safe directories, atomic writes, permissions, and guarded deletes. |
| Serialization | Safe parsing, untrusted input, YAML, JSON, pickle risk, and object loading. |
| Subprocess use | Argument lists, shell avoidance, exit codes, timeouts, and output handling. |
| Dependencies | Package review, pinning, vulnerability awareness, and update discipline. |
| Evidence | Logs, findings, timestamps, correlation values, and sensitive-data minimization. |
Before publishing deep objective pages or sample questions for PCAS, re-check the live Python Institute roadmap and any active PCAS exam page. Do not infer exam duration, score, number of questions, pricing, or tool requirements from this early guide.