A practical course on two related Node.js security topics. First, the historically real risk created by inconsistent URL parsing behavior between Node.js's legacy URL parsing module and the newer WHATWG-standard implementation, and why this creates a validation bypass risk for any security decision built on parsing a URL. Second, Transport Layer Security (TLS) certificate pinning, covering full certificate versus public key pinning, the honest operational trade-off between assurance and rotation risk, when pinning is and is not appropriate, and how to implement and test both topics as part of a secure code review discipline.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
