Choosing Models for Security Workloads: Hosted, Open Weight and Self-Hosted

IntermediateFree5 modules · 15 lessons · ~2 min

About this course

A practical decision framework for choosing between hosted frontier models, self-hosted open weight models and small task-specific models for a given security workload. You will learn to weigh capability, cost, latency, data handling, deployment model, licensing and support against a specific task's real requirements, use a decision table and worked examples to reach a defensible choice quickly, and build the review discipline to keep a whole model portfolio current.

What you'll learn

The Decision Space: Hosted, Open Weight and Task-Specific

Framing the Choice: Hosted, Open Weight and Task-Specific Models
Capability: What 'Good Enough' Means for a Security Task
Cost Models: Tokens, Compute and Total Cost of Ownership

Operational Factors: Latency, Data and Deployment

Latency and Throughput for Security Workloads
Data Handling, Residency and What Leaves Your Environment
Deployment Models: SaaS, Private, On-Prem and Air-Gapped

Licensing and Support

Licence Terms for Hosted Application Programming Interfaces versus Open Weight Models
Support, SLAs and Vendor Accountability
Lock-in, Portability and Exit Costs

Matching Model to Workload

01The Decision Space: Hosted, Open Weight and Task-Specific3 lessons

Framing the Choice: Hosted, Open Weight and Task-Specific Models
Capability: What 'Good Enough' Means for a Security Task
Cost Models: Tokens, Compute and Total Cost of Ownership

02Operational Factors: Latency, Data and Deployment3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

A Decision Table for Common Security Workloads
Worked Example: Triage and Detection Engineering
Worked Example: Secure Code Review at Scale

Building a Model Portfolio

Why Most Security Teams End Up With More Than One Model
Evaluating and Re-Evaluating the Choice Over Time
Building a Model Selection Policy for Your Team

Latency and Throughput for Security Workloads

Data Handling, Residency and What Leaves Your Environment

Deployment Models: SaaS, Private, On-Prem and Air-Gapped

03Licensing and Support3 lessons

Licence Terms for Hosted Application Programming Interfaces versus Open Weight Models
Support, SLAs and Vendor Accountability
Lock-in, Portability and Exit Costs

04Matching Model to Workload3 lessons

A Decision Table for Common Security Workloads
Worked Example: Triage and Detection Engineering
Worked Example: Secure Code Review at Scale

05Building a Model Portfolio3 lessons

Why Most Security Teams End Up With More Than One Model
Evaluating and Re-Evaluating the Choice Over Time
Building a Model Selection Policy for Your Team2 min

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.