Portal: SBOM Publishing, Sharing & Trust Center

IntermediateFree7 modules · 18 lessons

About this course

How Safeguard's Portal product turns an internal SBOM into an externally shareable, audit-grade artifact — Publish vs Share, the Product/Project vocabulary split, and the Trust Center's public posture page.

What you'll learn

Two Things Named Portal

The Free Entry Tier vs the Product
Publish vs Share

Products, Projects, and the Sharing Toolkit

Product vs Project
Sub-modules and the Trust Center

Compliance and Audit Use Cases

EO 14028, FedRAMP, and NTIA Minimum Elements
Why Audit Trails and Tracked Links Matter

SBOM Formats in Depth

SPDX: Structure, Fields and When to Use It
CycloneDX: Structure, VEX and the Security Lean
NTIA Minimum Elements and What Makes an SBOM Usable

The SBOM Repository: Versions, Tags and Diffing

Version Lifecycle and Tagging Strategy
Diffing Two SBOMs, and Reading the Result
Importing from Syft, Trivy and Other Generators

Sharing Mechanics and Access Control

Direct Links, Tracked Distribution and Audit Trails
Publish versus Share, Applied to Real Scenarios
Compliance Verification: EO 14028 and FedRAMP in Portal

Operating Portal at Scale

My Products, the External Catalog
Find and Review SBOMs: Discovery Across the Repository
User Roles and Separation of Duties in Portal

01Two Things Named Portal2 lessons

The Free Entry Tier vs the Product
Publish vs Share

02Products, Projects, and the Sharing Toolkit2 lessons

Product vs Project

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

Sub-modules and the Trust Center

03Compliance and Audit Use Cases2 lessons

EO 14028, FedRAMP, and NTIA Minimum Elements
Why Audit Trails and Tracked Links Matter

04SBOM Formats in Depth3 lessons

SPDX: Structure, Fields and When to Use It
CycloneDX: Structure, VEX and the Security Lean
NTIA Minimum Elements and What Makes an SBOM Usable

05The SBOM Repository: Versions, Tags and Diffing3 lessons

Version Lifecycle and Tagging Strategy
Diffing Two SBOMs, and Reading the Result
Importing from Syft, Trivy and Other Generators

06Sharing Mechanics and Access Control3 lessons

Direct Links, Tracked Distribution and Audit Trails
Publish versus Share, Applied to Real Scenarios
Compliance Verification: EO 14028 and FedRAMP in Portal

07Operating Portal at Scale3 lessons

My Products, the External Catalog
Find and Review SBOMs: Discovery Across the Repository
User Roles and Separation of Duties in Portal

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.