Haven’t done the OSWA, am an OSCP holder though.

Just heard about API Security Certified Professional (ASCP) - which is supposed to be OSCP-like but for API’s. A friend in the industry was excited about it, I have yet to dig into it, but it sounds like its hands on like the Offensive Security certs.