About · The CBDP Standard
The standard, in plain terms.
CBDP is a public, peer-reviewed certification for security practitioners who own adversarial traffic in production. It exists because every other credential in the space is either a vendor product, a marketing badge, or a NDA-bound briefing from a research group — and operators on call at 2am deserve better than that.
Why this exists
A thirteen-year-old field with no shared vocabulary.
Bot abuse stopped being a niche problem a decade ago. Carding, credential stuffing, scalping, scraping, AI-driven account creation, and high-volume content fraud now consume meaningful percentages of most security and platform teams' incident time. Practitioners are hired into roles like Trust & Safety Engineer, Anti-Abuse Lead, Adversarial Traffic Analyst, and Application Security — Edge, and asked to deliver outcomes on day one. They learn on the job from incident retros, vendor documentation, and a small constellation of conference talks.
What they do not get is a shared map of the territory. CBDP is the attempt to draw that map and to issue a credential that says, in a sentence: this person can read a fingerprinting signal, design a friction surface, integrate it at the edge, and explain the trade-off to a product owner without resorting to vendor slogans.
Operating principles
Four commitments held by the standard.
- 01
Public by default
The curriculum, the exam blueprint, and the body of knowledge are published in the open. Closed material undermines the credential — practitioners deserve to study what they will be tested on.
- 02
Both sides of the wire
A defender who has never written a working bot is incomplete. The standard requires fluency in evasion technique because evasion is what defenders are paid to interrupt.
- 03
Production over theory
Every section ends with an artifact: a rule, a classifier, a runbook, a measurement. Lectures earn their keep by producing things you can ship to a staging environment.
- 04
Peer-reviewed, slowly
Drafts circulate to a working group of practicing operators before publication. Section content can change between drafts; the exam blueprint cannot, without a recorded vote.
By the numbers
Where the public draft stands today.
- IX
- curriculum sections
- 50
- lecture units
- 12
- graded lab assignments
- 03
- years from idea to v1.0
Read next