Several analysis engines, one queue, and engineers who have stopped trusting it. This course treats normalisation as the data problem it is. It covers severity scales that do not align and why a straight lookup table is dishonest, rule identifiers that mean different things in different tools, the Common Weakness Enumeration as the closest thing to a shared vocabulary together with the specific places it fails, location and fingerprint differences, what the Static Analysis Results Interchange Format genuinely standardises and what it leaves to the producer, provenance so that a normalised finding still names the engine behind it, confidence and how to combine engines that disagree without averaging away the signal, and the governance question of who owns the normalised severity when the tool and the team disagree. It is written to be tool independent, so that you can evaluate any implementation of this, including ours, or build your own where that is the right choice.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
