What a product security engineer can and cannot learn from an artefact whose source they do not hold, written for the rebranded product, the acquired product line, the supplier who has gone quiet and the advisory you have to answer this week. You will work through what survives compilation, the authorisation boundary, firmware image extraction at the filesystem level and how to read a failed extraction, identification of statically linked components, and the false positive profile of version inference, which is the lesson the course exists for because inferred versions are frequently wrong in both directions. It closes on configuration and credentials that shipped inside images, identifying cryptographic use, matching advisories when you have a component but no confident version, and the point at which you stop analysing and require a bill of materials from the supplier. Defensive throughout: no exploitation, no bypass technique and nothing aimed at somebody else's device. This is training material and not regulatory or legal advice.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
