GWAPT

GWAPT is GIAC's certification for penetration testers who specialize in web applications, covering injection, authentication and session flaws, and client-side attacks. Unlike broad pentest credentials, it drills into the web stack specifically, mapping closely to the bug classes in the OWASP Top 10. It suits testers whose engagements center on web apps rather than networks.