Awarded for completing Upload Scanning: SBOMs, CSAF/VEX, Manifests and Database Change-Logs and passing its exam, demonstrating the ability to choose the right upload path, read SBOM and VEX documents critically, and operate an upload-based scanning program correctly over time.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
