A platform owner's method for reading Infrastructure as Code (IaC) definitions with an attacker's questions rather than a linter's, written for someone who owns the substrate every team ships on. You will establish what automated checks structurally cannot produce, adopt a review order that finds more, read permission documents for what they grant rather than what they say, follow trust relationships and assumption chains, trace exposure as a path assembled from balancers, resource policies, peering and managed services, and ask the key ownership and copy questions that matter once encryption is already on. It closes with state files, registry modules and the trust decision in reusing one, drift as a review input, the one line change that widens an estate, and a checklist and operating model a team will actually run. Defensive throughout: what to look for and how to fix it.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
