A deep, practitioner level treatment of Identification and Authentication Failures: its sub-classes from weak and unthrottled credentials through session fixation and weak password recovery, the Common Weakness Enumeration entries mapped to it, and realistic weak and fixed code across a login endpoint, session handling and a password reset flow. You will learn why this category's detection genuinely splits between strong automated secrets scanning coverage and load bearing manual and dynamic testing, how findings are fixed and prevented, how it is evidenced for an audit, and where Safeguard surfaces it today.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
