ISTQB Advanced Security Tester Training
Learn to plan and run security tests and prepare for the ISTQB Security Tester certification
- Duration
- Live batches
- Format
- Live online
- Modules
- 8 modules
- Certificate
- On completion
- ✓Live online instructor-led training in scheduled batches; the full schedule and total hours are shared before you enrol
- ✓Follows the ISTQB Certified Tester Security Tester (CT-SEC) syllabus, formerly the Advanced Level Security Tester
- ✓Threat modelling and security risk assessment exercises on a sample web application
- ✓Hands-on lab with common vulnerabilities such as injection, broken authentication and misconfiguration
- ✓Security test planning inside agile and DevOps pipelines
- ✓Exam-style mock paper for the 120-minute, 45-question exam
About the course
What this course covers
Security defects are among the most expensive that an organisation can ship, yet many test teams have no structured way to look for them. The ISTQB Certified Tester Security Tester (CT-SEC) syllabus, which many people still know as the Advanced Level Security Tester, gives testers a methodical approach to security risks, test planning, test design and the review of security mechanisms.
This course starts from security risk and threat modelling, then builds a security test plan and walks through how to test authentication, authorisation, session handling, input validation, cryptography use, configuration and the security of communication channels. Labs use a deliberately vulnerable practice application so you can see the vulnerability classes discussed in the syllabus, with references to widely used industry lists such as the OWASP Top 10.
The course also covers the human factor (social engineering and awareness), security tools and how to include security testing in continuous delivery. The credential is awarded through ISTQB national boards; this course prepares you for the exam but is not a substitute for sitting it.
Who should attend
- ● Functional testers who want to add security testing to their skill set
- ● QA leads who must show security coverage to auditors and customers
- ● Developers and DevOps engineers moving into DevSecOps responsibilities
- ● Junior security analysts who want a testing-focused framework
- ● Test managers who need to plan security test activities
Key skills
Skills you will walk away with
Security risk assessment
Identify assets, threats and vulnerabilities and rank security risks to drive test priorities.
Threat modelling
Model data flows and trust boundaries to find where attacks are most likely.
Security test planning
Write a security test plan that fits the SDLC, scope and regulatory constraints.
Vulnerability-focused test design
Design tests for injection, broken access control, weak authentication and insecure configuration.
Testing security mechanisms
Evaluate authentication, authorisation, encryption and logging controls for effectiveness.
Security tools
Know the role of static analysis, dynamic scanners, dependency checks and fuzzers and interpret their output.
Curriculum
Module-by-module syllabus
8 modules · 32 topics
1Module 1: Security Fundamentals and Risks4 topics ▾
Learning objective: Understand security concepts and the threat landscape.
- ▸ Confidentiality, integrity, availability and related concepts
- ▸ Threats, vulnerabilities, attack vectors
- ▸ Business impact of security failures
- ▸ Overview of security standards and OWASP resources
2Module 2: Security Risk Assessment and Threat Modelling4 topics ▾
Learning objective: Find and rank security risks.
- Asset identification and risk scoring
Schedules
Upcoming live batches
Enroll now and choose your batch dates
Send an enquiry and we'll reserve your seat in the next batch.
Certification
How you get certified
ISTQB (International Software Testing Qualifications Board), delivered through national member boards and their exam providers
Certified Tester Security Tester (CT-SEC)
- Format
- Multiple choice scenario-based questions
- Questions
- 45 questions (80 points)
- Duration
- 120 minutes (25% extra time is normally available to candidates sitting in a non-native language; confirm with your exam provider)
- Passing score
- 52 points out of 80 (at least 65%)
- Exam fee
- See the current figure on the official site; the fee is set by the exam provider and varies by country
- Delivery
- Online proctored or at a test centre, depending on the exam provider chosen through your ISTQB member board
- Validity & renewal
- Lifetime; ISTQB certificates do not expire
Career outcomes
Roles this opens up
Security Tester / QA Security Analyst
₹6–14 LPA (approx.)Plans and executes security tests and reports vulnerabilities to development teams.
DevSecOps Engineer
₹10–22 LPA (approx.)Integrates security scanning and testing into build and release pipelines.
Application Security Analyst
₹8–18 LPA (approx.)Reviews applications for security weaknesses and works with teams to fix them.
Salary ranges are approximate figures for India and vary by city, company and experience.
Why this certification is worth it
Structured security testing approach
A risk-based framework replaces ad-hoc scanning.
Audit-friendly practice
A documented security test approach helps in customer security reviews and compliance audits.
Bridge between QA and security
Why Assure Success
Learn it once, pass it once
Trainers from the field
Every session is led by a practitioner who uses this material at work.
Batches that fit your week
Weekday and weekend batches in IST, scheduled for working professionals.
Exam-style practice
Practice questions and, where available, a full simulator free with the course.
Exam voucher help
Discounted vouchers and step-by-step help booking your exam.
Human support
WhatsApp support Mon–Sat, 9 AM–8 PM IST — a person answers.
Pay your way
UPI, cards, netbanking and EMI in India; international cards accepted.
FAQs
Questions learners ask us
Q.Will this make me an ethical hacker?
No. This is a testing-focused credential about planning and executing security tests. Penetration-testing certifications are a different path.
Q.Is a Foundation certificate required?
Yes. ISTQB requires a valid Foundation Level certificate before the security exam.
Q.Why is it called both Advanced Security Tester and CT-SEC?
ISTQB originally released it as an Advanced Level module. In ISTQB's current exam tables it is listed as the Certified Tester Security Tester (CT-SEC) specialist module. It is the same qualification area.
Q.Do I need networking or programming skills?
Basic understanding of web requests, HTTP and common application architecture is enough. We cover the security concepts from scratch.
Q.What tools will I use in class?
We use freely available tools and a deliberately vulnerable practice application. The syllabus is tool-neutral, so the exam does not test specific products.
Q.Is the exam harder than Foundation?
It is longer (120 minutes, 45 questions) and scenario-based, so it needs preparation, but you can pass without prior security work if you complete the labs.
Reviews & questions (0)
Log in to join the discussion.
No comments yet.
Still have a question?
Tell us what you need — we reply the same working day.
₹31,999
ISTQB Advanced Security Tester Training