CSSLP
Certified Secure Software Lifecycle Professional · ISC2
The CSSLP proves that you know how to build security into every stage of software development: requirements, architecture, coding, testing, deployment, operations and the software supply chain. It is the only major vendor-neutral certification of its kind, appreciated by software publishers and in regulated sectors. Its strength is that full lifecycle view, useful for governance; its limit is modest recognition in France and no hands-on component, so it does not prove you can find or fix a flaw in code.
- Exam
- Linear exam: 125 multiple-choice questions in 3 h, pass mark 700/1,000. Exam outline in force since 15 September 2023.
- Exam price
- $599€575.04 in Europe.
- Required experience
- Four years of cumulative full-time experience in at least one of the eight CSSLP domains; a relevant degree can waive one year. Without it, you become an Associate of ISC2 with five years to gain the experience.
- Validity and maintenance
- 3-year cycle: 90 CPE credits (30 per year) and an annual maintenance fee of US$135, a single fee however many ISC2 certifications you hold.
- Format
- Multiple choice
- Recognition
- ISO/IEC 17024 accredited · DoD 8140 approved
Who is it for?
Lead developers, software architects, AppSec engineers and product security managers with several years in software development.
Domains covered
- Secure software concepts: 12%
- Secure software lifecycle management: 11%
- Secure software requirements: 13%
- Secure software architecture and design: 15%
- Secure software implementation: 14%
- Secure software testing: 14%
- Secure deployment, operations and maintenance: 11%
- Secure software supply chain: 10%
Nestor’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
