A working method for securing an application programming interface (API) built with GraphQL rather than a REST-style architecture of many fixed endpoints. You will reason about the structural shift a single, caller-composed query introduces, apply depth limits and cost-based complexity analysis to stop a nested or fan-out query from exhausting server resources, enforce authorization at the level of an individual field rather than a single resource boundary, decide when introspection should be restricted in production, close the rate-limiting gap that alias-based batching opens, handle errors without leaking schema or implementation detail, and weigh persisted query allow-listing as a pattern that trades some of GraphQL's flexibility for a materially smaller, pre-approved attack surface. No real GraphQL implementation product is named anywhere in this course.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
