Validates working knowledge of Safeguard's Runtime Protection (CWPP/CNAPP concepts, ATT&CK-mapped rule packs, the ~1% CPU eBPF collector, and gated response: alert/block/kill/quarantine/isolate) and Package Firewall (install-time proxy for npm/pip catching typosquatting, dependency confusion, and malware, with allow/warn/block/audit/quarantine modes).
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
