Deployment Models: Managed Service, Virtual Private Cloud and Cloud Agnostic

IntermediateFree5 modules · 15 lessons · ~2 min

About this course

A platform and DevOps guide to Safeguard's full deployment menu, from shared managed service through logical isolation, dedicated tenancy, private virtual cloud, on-premises and sovereign air-gapped deployment. You will learn how data residency, identity and network egress differ at each rung, how cost and operational ownership shift as isolation deepens, what cloud agnostic actually means across fifteen or more providers, and how to choose and migrate between models honestly, including the precise language for describing certification readiness.

What you'll learn

The Deployment Menu

Why the Deployment Model Is a Security Decision, Not Just an IT Decision
The Menu: From Shared Free and Pro Through to Sovereign
Reading Your Own Requirements Before You Choose

Data Residency, Identity and Egress Per Model

Data Residency and Regions Across the Deployment Menu
Identity: Single Sign-On, Role Based Access Control and SCIM at Each Isolation Level
Egress and Network Posture: What Polling Instead of Open Connections Buys You

Cost and Operational Ownership

The Cost Curve: Why Isolation Is Priced the Way It Is
Who Operates What: Shared Responsibility Across the Models
Total Cost of Ownership Beyond the Price List

01The Deployment Menu3 lessons

Why the Deployment Model Is a Security Decision, Not Just an IT Decision
The Menu: From Shared Free and Pro Through to Sovereign
Reading Your Own Requirements Before You Choose

02Data Residency, Identity and Egress Per Model3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

Cloud Agnostic in Practice

What Cloud Agnostic Actually Means
Choosing Among Many Cloud Providers Without Getting Locked In
The Local Runner as a Bridge Between Managed Service and Self-Hosted

Choosing and Migrating

A Decision Framework for Choosing a Deployment Model
Migrating Between Models Without Losing History
Certification Language and How to Talk About Readiness Honestly

Data Residency and Regions Across the Deployment Menu

Identity: Single Sign-On, Role Based Access Control and SCIM at Each Isolation Level

Egress and Network Posture: What Polling Instead of Open Connections Buys You

03Cost and Operational Ownership3 lessons

The Cost Curve: Why Isolation Is Priced the Way It Is
Who Operates What: Shared Responsibility Across the Models
Total Cost of Ownership Beyond the Price List

04Cloud Agnostic in Practice3 lessons

What Cloud Agnostic Actually Means
Choosing Among Many Cloud Providers Without Getting Locked In
The Local Runner as a Bridge Between Managed Service and Self-Hosted

05Choosing and Migrating3 lessons

A Decision Framework for Choosing a Deployment Model
Migrating Between Models Without Losing History
Certification Language and How to Talk About Readiness Honestly2 min

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.