CASEEC Council Certified Application Security Engineer (.NET or Java)
Created per CertMap methodology · About the editorial team → · Official page ↗
▾ Jump to …6 sections
What is CASE?
CASE is EC-Council's certification for secure application development and comes in two independent variants, .NET and Java, which candidates may sit individually or both. The exam asks 50 multiple-choice questions in two hours with a pass mark of 70 percent and is taken online under remote proctoring by the RPS team. Admission runs through one of four routes: official CASE training, an existing ECSP membership, at least two years of professional experience in information security or software development, or an industry-equivalent certification such as GIAC GSSP. The credential is valid for three years and is renewed through EC-Council's continuing education programme with 120 credits per cycle.
Suitable for
Quick facts
CertMap assessment & background
CASE is not a flagship in the EC-Council portfolio, and the provider's own pages show it: EC-Council lists eight other certifications as accredited to ISO/IEC 17024 and CASE is not among them, while its annual fee sits at 80 USD in the base tier against 100 USD for CCISO and 250 USD for CPENT. The bill beyond the voucher is easy to underestimate: without official training EC-Council requires two years of professional experience plus a 100 USD application fee on top of the 450 USD voucher, and the three-year cycle adds 120 ECE credits and 240 USD in continuing education fees. The limit is the format: 50 multiple-choice questions in two hours test knowledge about secure development, not code that was actually written. Anyone who needs an externally accredited credential should look at GIAC GSSP, which EC-Council itself names as industry-equivalent.
More on CertMap editorial methodology →Cost, prerequisites, exam & renewal
Cost over 5 years
Prerequisites
Admission requires one of four routes: official EC-Council CASE training at an accredited partner, a valid ECSP membership in .NET or Java, at least two years of professional experience in information security or software development, or an industry-equivalent certification such as GIAC GSSP. Except on the ECSP route a non-refundable 100 USD application fee applies, often already included in the training price. Training itself is not mandatory.
Exam format
The exam consists of 50 multiple-choice questions and runs for two hours. The pass mark is 70 percent. It is taken online under supervision: the voucher is issued for remote proctoring by the RPS team. .NET and Java are separate exams with an identical format.
Renewal & maintenance
The credential is valid for three years. Renewal requires 120 ECE credits per cycle documented in EC-Council's Aspen portal, which works out to 40 credits per year. On top of that an annual continuing education fee of 80 USD applies. There is no separate renewal fee.
CertMap score and matching roles
Rating
Schema quality 1/3: no external accreditation, CASE is missing from EC-Council's own ISO/IEC 17024 list, and only its eight-phase exam development process is documented. Practice evidence 1/3: 50 plain multiple-choice questions under remote proctoring, no lab. Currency 0/3: neither a revision cycle nor a date of the last content revision is published. Market recognition 1/3: only the self-mapping to NICE 2.0, the base fee tier and EC-Council's own reference to GIAC GSSP.
Matching NICE roles
About EC-Council
EC-Council names eight of its own certifications as accredited to ISO/IEC 17024 by the ANSI National Accreditation Board, among them CEH, CPENT, CCISO, CND, CHFI and CCT. All of the provider's certifications have been valid for three years from the date of certification since 1 January 2009 and are renewed through its continuing education programme with 120 credits per three-year cycle. The annual continuing education fee is 80 USD, rising to 100 USD for CCISO and 250 USD for CPENT and LPT. EC-Council describes exam development as an eight-phase process running from objective domain definition through job analysis and scheme committee approval to launch. Vouchers are sold through the provider's own store in US dollars.
More certifications
From EC-Council
CCISOEC Council Certified Information Security OfficerCEHEC Council Certified Ethical HackerCHFIEC Council Computer Hacking Forensics InvestigatorCNDEC Council Certified Network DefenderCNDAEC Council Certified Network Defense ArchitectCPENTEC Council Certified Penetration Testing Professional
From the knowledge base
View all articles →CISSP or CISM? Two Careers, One Decision
Both require five years of experience, both cost roughly the same at first glance. Yet CISSP and CISM lead to different professions. The comparison with the numbers that course providers don't show.
CISM or CISA? Two ISACA paths, one directional decision
Both come from ISACA, both require five years of experience, and both cost almost the same. The difference is not the price but the role: managing or auditing. The comparison with the numbers and the role mapping.
CC or Security+? The Free Entry Point and the Job-Market Classic
Both are entry-level certifications with no admission barrier, both cover the fundamentals of cybersecurity, and yet they stand for different strategies: one as a low-threshold, temporarily free start, the other as an established credential with weight in the job market. The comparison with the numbers and the opposing cost logic.