Security engineers
Triage findings, decide what is exploitable, run AI Swarm Pentest sessions and own the evidence trail.
Plexicus Academy · Certification
Plexicus Certified
Practitioner
Learn to run Proof-Driven AppSec on the Plexicus platform: connect your code, validate what is exploitable, fix it with reviewed changes, and hand auditors the evidence. Free, self-paced, and finished with a credential anyone can verify.
Sample 
Plexicus Academy
Plexicus Academy This certifies that
Your name here
Plexicus Certified Practitioner
has passed the Plexicus Certified Practitioner exam and has demonstrated the knowledge to run Proof-Driven AppSec on the Plexicus platform: AI Swarm Pentest, Deep Code Analysis, Remediation and XBOM.
- Issued
- October 17, 2026
- Valid until
- October 17, 2028
- Credential ID
- PCP-7KQ2-M9XA-4HTD
Verify at plexicus.ai/academy/certification/verify
- modules
- 10
- hours of learning
- 6
- exam questions
- 40
- to pass
- 80%
- no account needed
- Free
Who it is for
Built for the people who run the platform day to day.
Developers and tech leads
Read a finding the way Plexicus explains it, review AI-generated fixes, and keep security inside the pull request.
Platform owners and admins
Connect source control, manage roles and SSO, automate the workflow and keep the organization audit-ready.
Curriculum
Ten modules, one path.
Each module has short lessons, product walkthroughs and a knowledge check. Your progress is saved in this browser.
- Module 1 · 25 min Proof-Driven AppSec foundations Learn why alert volume is a poor measure of security and how the Validate, Understand, Remediate loop replaces it with evidence. Then get a map of the Plexicus platform, its built-in roles and its deployment options.
- Module 2 · 30 min Getting started: workspace, source control and first scan Sign in, connect source control with only the access Plexicus needs, add your first repositories and follow a scan from Queued to Enriched. You finish with a first look at the Dashboard.
- Module 3 · 35 min Scanning engines and coverage Learn which Plexicus engines cover which risks, how to turn them on for your organization or for one repository, how to bring in results from CI and other scanners, and how every result becomes one normalized, enriched finding.
- Module 4 · 40 min Findings, prioritization and triage Learn where Plexicus findings live, how to read every signal on a finding, and how to move findings through triage, ownership and remediation. You finish by measuring progress on the Dashboard.
- Module 5 · 35 min Deep Code Analysis Learn how Deep Code Analysis turns a scanner match into a finding you understand: the data flow behind it, whether attackers can reach it, and how far to trust the AI verdicts attached to it.
- Module 6 · 40 min AI Swarm Pentest Run AI Swarm Pentest as a scoped, authorized engagement. Prove you own the target, then configure and launch an AI Pentest, follow the swarm live, and review findings backed by recorded proof-of-concept evidence.
- Module 7 · 35 min Remediation: from verified finding to reviewed change Learn how Plexicus turns a verified finding into a code change your team can review, how to check and edit that change, and how to open the pull request your team decides whether to merge. You also cover bulk remediation and the AI settings and usage limits behind it.
- Module 8 · 40 min XBOM, compliance and reporting Learn how XBOM inventories the software, cryptography and AI models in your repositories, how to record VEX statements and exchange BOMs, and how the Compliance view and reports turn findings into audit evidence. Plexicus produces mappings and evidence; your auditors decide on compliance.
- Module 9 · 35 min Automation, integrations and developer tools Route findings to fixes, tickets and approvals with Plexicus Automation, connect your ticketing tools and webhooks, and work with Plexicus from scripts, the terminal and your IDE.
- Module 10 · 40 min Administration, identity and governance Learn how platform owners run a Plexicus organization: who gets access and with which role, how people sign in, how actions are recorded, and which settings shape the whole workspace. You finish with the deployment options and how to keep a self-hosted install recoverable.
How certification works
Learn, practise, prove it.
- 01
Work through the modules
Read the lessons in order or jump to what you need. Every module explains where things live in the product and why they work that way.
- 02
Pass each knowledge check
Short quizzes with explanations at the end of every module. They are practice only and do not count toward certification.
- 03
Take the final exam
40 multiple-choice questions across all ten modules. Score 80% or more to pass. Open book, 4 hours per attempt, retakes allowed.
- 04
Share a verifiable credential
Passing issues a signed credential with its own ID and verification link. Add it to LinkedIn or print it as a PDF.
Your credential
A certificate that proves itself.
Every credential is cryptographically signed by Plexicus. Anyone with the link can confirm who earned it, when, and whether it is still valid. Nobody can edit the name, the date or the score.
- Unique credential ID, for example PCP-7KQ2-M9XA-4HTD
- Public verification page, no login required
- Valid for 24 months, then renew by passing the current exam
- One-click add to your LinkedIn profile
FAQ
Questions about the certification
How much does it cost?
Nothing. The course, the exam and the credential are free. You do not need a Plexicus account to study or to take the exam.
Do I need access to the Plexicus platform?
No. The modules explain the product with walkthroughs of the real screens and workflows. Having a workspace helps you practise, but the exam only tests what the course teaches.
How long does it take?
Most people finish the ten modules in five to six hours spread over a few sessions. The final exam takes about 45 minutes, and each attempt stays open for 4 hours.
What happens if I fail the exam?
You see that you did not pass, but not which answers were wrong, so the exam stays fair for everyone. Use each module's knowledge check to find what to review, then retake the exam. Each attempt draws a new set of questions, and there is no limit on attempts.
How is my data handled?
We only ask for the name you want printed on the certificate. It is embedded in your signed credential and is not stored in a database. Your course progress stays in your own browser.
How long is the credential valid?
24 months from the day you pass. The platform changes quickly; renewing means passing the exam version that is current at the time.
Ready to get certified?
Start with module 1, or go straight to the exam if you already run Plexicus every day.