What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.

Courses

Out-of-Band Application Security Testing (OAST): Finding Blind Vulnerabilities

AdvancedFree5 modules · 15 lessons · ~2 min

About this course

An advanced course in out-of-band testing: why some vulnerabilities produce no in-band signal at all, and how Safeguard's collaborator mechanism confirms blind server-side request forgery, XML external entity injection, unsafe deserialisation and log4shell-style callbacks with unusually high confidence. You will learn correlation, safe collaborator discipline, and how to combine this engine with static, dynamic and interactive testing.

What you'll learn

Foundations of Out-of-Band Application Security Testing (OAST)

Why Some Vulnerabilities Are Invisible In-Band
Domain Name System (DNS) and HTTP Collaborator Interactions Explained
Where Out-of-Band Application Security Testing (OAST) Fits Among Safeguard's Application Security Testing Engines

The Vulnerability Classes OAST Finds

Blind Server-Side Request Forgery (SSRF): Detection Through Callback
Blind XML External Entity (XXE) Injection and Unsafe Deserialisation
Blind Command Injection and Log4Shell-Style Callbacks

Correlating Interactions to Findings

Correlating a Callback Back to Its Originating Request and Payload
Why Out-of-Band Application Security Testing (OAST) Findings Are High Confidence
Anatomy of an Out-of-Band Application Security Testing (OAST) Finding in Unified Findings

Operating Out-of-Band Testing Safely

The Discipline of Never Pointing a Collaborator at Third-Party Infrastructure
Scanner Settings, Scan Depth and Timing Windows for Out-of-Band Testing
Combining Out-of-Band Testing with Static, Dynamic and Interactive Testing for Full Coverage

Triage, Remediation and Program Maturity

Triage, Suppression and False Positive Discipline for Out-of-Band Application Security Testing (OAST)
Griffin AI Remediation, Policies and Gates for Out-of-Band Application Security Testing (OAST)
Building an Out-of-Band Application Security Testing (OAST) Program: Rollout, Metrics and Maturity

01Foundations of Out-of-Band Application Security Testing (OAST)3 lessons

Why Some Vulnerabilities Are Invisible In-Band
Domain Name System (DNS) and HTTP Collaborator Interactions Explained
Where Out-of-Band Application Security Testing (OAST) Fits Among Safeguard's Application Security Testing Engines

02The Vulnerability Classes OAST Finds3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.