What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.

Courses

Integrating a Custom Scanner: Static Analysis Results Interchange Format, Findings and Gates

AdvancedFree5 modules · 15 lessons

About this course

An advanced course for Application Security (AppSec) practitioners on bringing a custom or third party tool into Safeguard as a trusted Connected Tool. You will learn to produce correct Static Analysis Results Interchange Format (SARIF) output, map severity honestly, deduplicate against existing engine findings, preserve provenance, and gate a pipeline on the result without breaking builds on noise.

What you'll learn

Why Bring a Third Party Tool In

One Findings Pane, One Gate, One Audit Trail
What Integrating Means at Safeguard: Connected Tools
Deciding Whether a Tool Is Worth Integrating

Producing Static Analysis Results Interchange Format Output

What the Static Analysis Results Interchange Format Actually Is
Mapping Your Tool's Findings into SARIF
Common Mistakes That Undermine an Otherwise Working Producer

Mapping Severity Honestly

Why Severity Mapping Is the Step Most Often Abused
Confidence and Severity Are Different Fields
Documenting the Mapping So an Auditor Can Reproduce It

Deduplication and Provenance

Deduplicating Against Engine Findings
Preserving Provenance: Which Tool Said What
A Worked Example: The Same Vulnerability, Found by Two Tools

Gating a Pipeline on the Result

Feeding Results into a Continuous Integration and Delivery Gate
Setting a Gate Policy Without Breaking Builds on Noise
From Custom Tool to Trusted Signal: An Operational Checklist

01Why Bring a Third Party Tool In3 lessons

One Findings Pane, One Gate, One Audit Trail
What Integrating Means at Safeguard: Connected Tools
Deciding Whether a Tool Is Worth Integrating

02Producing Static Analysis Results Interchange Format Output3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.