A practical course for the team that receives vulnerability reports rather than sends them. It covers building a real Coordinated Vulnerability Disclosure (CVD) programme with a published policy, a safe harbor commitment and a defined scope, triaging and scoring inbound reports without discouraging future good faith reporters, deciding whether and when to move from an unpaid programme to a paid bug bounty, running the researcher relationship day to day including the hardest part of coordinated disclosure timelines, and the governance and metrics that keep a programme healthy over years rather than months.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
