Human judgement, AI speed.
Aveas Security Certifications
A three-level certification track in continuous penetration testing: how AI-assisted testing covers every release, how experienced testers prove what is exploitable, and how the results become fixes and audit-ready evidence.
About the track
Aveas is penetration testing as a service. AI-assisted testing covers breadth on every release, human penetration testers verify exploitability, findings land as Jira or GitHub tickets, and the evidence is ready for SOC 2, ISO 27001, HIPAA and PCI DSS audits.
The Aveas certification track teaches that way of working. Fundamentals builds a shared understanding across engineering, security and compliance. Professional trains practitioners to find, exploit and verify. Advanced prepares leaders to run continuous offensive security across many products and to stand behind the evidence.
Breadth on every release: what automated and AI-assisted testing covers, and where it stops.
A person proves exploitability with safe evidence, and false positives are discarded.
Findings become tickets developers can act on, and are retested to closure.
Evidence that stands up to SOC 2, ISO 27001, HIPAA and PCI DSS auditors.
Three levels, from foundations to leadership
Each level builds on the one before. Every certification is assessed, and every pass earns a certificate anyone can verify.
Aveas Fundamentals
Continuous Penetration Testing Essentials
The foundations of modern application security testing: how attackers approach a SaaS product, how continuous AI-assisted testing and human verification work together, and how to read, score and act on a penetration test finding.
- For
- Security engineers moving into offensive testing; Developers and QA engineers who receive and fix findings
- Modules
- 8
- Assessed by
- Online knowledge and scenario exam
- Prerequisite
- None
Aveas Professional
Hands-on Web Application and API Penetration Testing
Plan and run a web application and API penetration test end to end: find and exploit real weaknesses, verify AI-generated findings with evidence, chain issues into attack paths, and write reports developers can fix.
- For
- Penetration testers and ethical hackers; Application security engineers running continuous testing
- Modules
- 9
- Assessed by
- Practical lab engagement and a graded report
- Prerequisite
- Aveas Fundamentals
Aveas Advanced
Leading Continuous Offensive Security Programs
Design and lead a continuous penetration testing program: threat-model complex cloud and multi-tenant systems, test cloud, CI/CD and AI features, run human and AI testing at scale, and produce audit-ready evidence for SOC 2, ISO 27001, HIPAA and PCI DSS.
- For
- Senior penetration testers and red team leads; Application and product security leaders
- Modules
- 10
- Assessed by
- Capstone engagement and a live program review
- Prerequisite
- Aveas Professional
Who it is for
Security engineers and pentesters
Hands-on web, API, cloud and AI-feature testing, with verification at the center.
GRC and compliance teams
What good testing evidence looks like, and how it maps to the frameworks you are audited against.
Engineering leaders
How continuous testing fits the release process, and how to measure and report it.
SaaS, fintech and healthtech
Examples and labs built around multi-tenant products, payment flows and health data.
Issued by Aveas, verified on VeraGen Learn
an authorized certificate authority, verified on VeraGen LearnAveas is penetration testing as a service, and the first authorized certificate authority on VeraGen Learn besides VeraGen itself. Aveas sets the standard and issues every certificate in this track under its own name. VeraGen Learn hosts the training and the exams, and verifies each certificate: an employer, a client or a contracting officer can check one on the Verify page in seconds, without an account. Holders also receive a digital badge for each level.
Standards and frameworks
The curriculum draws on the OWASP Top 10, the OWASP API Security Top 10, the OWASP Top 10 for LLM Applications and CVSS. We plan to publish a mapping to the NICE Workforce Framework for Cybersecurity (NIST SP 800-181) before the certifications open. Aveas certifications are not currently accredited by a certification body or approved under any government workforce program; we will say so here if that changes.
Opening in 2027: get notified
Leave your email and we will tell you when enrollment opens. Training a team, or interested in partnering on the program? Contact us.