Awarded for completing Attack Surface Reduction and Hardening and passing its exam, demonstrating the ability to inventory what is actually running, installed, listening, or granted before removing anything, apply a safe disable-then-delete removal process, weigh the trade-off between hardening and operational flexibility honestly, and track attack surface reduction progress as an ongoing metric.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
