Introduction
The Secure Software Testing Specialist (SSTS) certification is awarded by the Global Institute of Professional Management Certification (GIPMC). It is a specialist credential for testers who check software for security weaknesses as well as correct behavior: abuse cases, injection flaws, access control, API security and vulnerability reporting.
GIPMC's intended audience includes testers and QA engineers, application security team members, automation engineers with security duties, DevSecOps practitioners, entry to intermediate application security analysts, QA leads and test managers, and QA staff moving into security.
BlueMorpho Learning Solutions is your training and enrollment partner for SSTS. We help you understand the exam, plan your preparation and enroll. GIPMC runs the exam and awards the certification.
Key Highlights
- Security-focused testing scope: 13 modules, from threat awareness to injection, authentication, API testing and vulnerability reporting.
- Tool-independent: GIPMC presents SSTS as not tied to particular tools or methods.
- Online proctored exam: 120 objective multiple-choice questions, including scenario-based items, in 150 minutes, with a 70% pass mark.
- Three-year validity: Valid for three years from the date of award, with renewal before expiry.
Curriculum
GIPMC's SSTS outline has 13 modules:
- Foundations of Secure Software Testing: what security testing is, confidentiality, integrity and availability, the attack surface and the tester's role.
- Secure Development Lifecycle & Testing Integration: security testing in each lifecycle phase, shift-left and shift-right testing, and teamwork with developers.
- Application Threat Awareness for Testers: common threats, the attacker mindset, abuse and misuse cases, and risk-focused testing.
- Security Test Planning & Strategy: risk-based planning, scope, objectives and priorities, and linking tests to threat models.
- Secure Test Design Techniques: abuse and negative cases plus fuzzing, boundary and edge-case checks, each tied to a security risk.
- Input Validation & Injection Testing: testing for SQL, command and script injection, input validation and unsafe data handling.
- Authentication & Authorization Testing: login, multi-factor and session controls, privilege escalation, access bypass and role-based access.
- API & Integration Security Testing: API authorization, rate limiting, data exposure and third-party dependencies.
- Automated Security Testing Awareness: static and dynamic scanning tools, security tests in pipelines, and the limits of automation.
- Vulnerability Identification & Reporting: validating and classifying findings and writing clear defect reports.
- Retesting, Regression & Verification: confirming fixes and preventing vulnerabilities from returning.
- Ethics, Compliance & Responsible Testing: testing only with authorization, safe practices, and compliance and documentation awareness.
- Secure Software Testing Capstone & Review: a complete secure testing exercise with findings, recommendations and a final readiness check.
We help you work through each module and connect it to the applications you test, so you are ready for the scenario questions.
Course Benefits
- Security in everyday testing: Learn to test for misuse and attack, not only for expected behavior.
- Exam readiness: Understand the format (120 questions in 150 minutes, 70% to pass) and practise managing your time.
- A credential you can show: On passing, GIPMC awards the SSTS certificate to add to your CV and professional profiles.
Post-Course Accomplishments
After completing your SSTS preparation and passing the exam, you will be able to:
- Plan by threat: Turn threat models into abuse cases and a risk-based security test plan.
- Test the common weak spots: Check input handling, injection, authentication, sessions and access control.
- Test APIs: Check API authorization, data exposure and rate limits within the agreed scope.
- Report clearly: Write security defect reports that explain risk and impact to developers.
Exam at a glance
| Item | Details |
|---|---|
| Awarding body | Global Institute of Professional Management Certification (GIPMC) |
| Credential | Secure Software Testing Specialist (SSTS) |
| Format | Objective MCQs with scenario-based questions |
| Number of questions | 120 |
| Duration | 150 minutes |
| Passing score | 70% |
| Delivery | Online proctored |
| Fee (USD) | Certificate: 399 USD (listed price; regular 500 USD). Optional study material: 149 USD (listed price; regular 249 USD). |
| Prerequisites | Not listed on GIPMC's credential page. Ask our team before you enroll. |
| Validity and renewal | 3 years from the date of certification award. Renewal involves professional development or a secure testing knowledge refresh, a renewal assessment or verification where applicable, and an application before expiry. |
| Retakes | Not stated on GIPMC's credential page. |
Fees are in USD, were checked in October 2026 and can change.
Exam details checked in October 2026. Always confirm on GIPMC's official credential page before booking.
Why Choose BlueMorpho for SSTS Certification
- Clear guidance: We explain the exam format, online proctoring and what to buy (the certificate and the optional study material).
- Preparation planned around GIPMC's modules: We help you plan your study around GIPMC's 13 SSTS modules and the published exam format.
- Enrollment support: We guide you through enrollment and answer your questions.
Conclusion
SSTS suits testers who want to find security weaknesses before software reaches users. If you want a structured way to build and demonstrate those skills, send us an enquiry to get started.
