A practical course on External Attack Surface Management (EASM): the discipline of continuously discovering and monitoring every internet facing asset an organisation owns or has inherited, distinct from internal vulnerability scanning which assumes the asset list is already known. You will learn why a large or acquisitive organisation's asset list is never actually complete, conceptual discovery techniques including Certificate Transparency logs, passive and active Domain Name System (DNS) analysis, and authorised cloud account enumeration, the specific finding categories EASM surfaces that internal scanning misses including subdomain takeover, exposed development environments and certificate hygiene issues, how to triage and assign ownership to an unrecognised discovered asset, continuous monitoring cadence versus a point-in-time assessment, and how to feed EASM findings into the same prioritisation and remediation machinery as the rest of the vulnerability programme. No fabricated statistics: every number used for illustration is arithmetic on a clearly labelled hypothetical dataset.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
