An intermediate course on one of the most common and most damaging cloud misconfigurations: an object storage bucket left publicly readable or writable. Covers why the default access setting, the ease of changing it, and the difficulty of noticing the change combine to make this an easy mistake and a hard one to catch; the specific mechanisms by which exposure happens, including an untightened permissive default, a temporary policy change never reverted, and confusion between bucket-level and object-level permissions; why this differs from an ordinary access control bug found by code review or application-scoped testing; continuous configuration scanning as the actual detection method, cross-referenced to external attack surface management and cloud security posture management; the blast radius question and the data inventory that supports it; why encryption at rest does not solve accidental public exposure; incident response specific to a discovered exposure, including the exposure window, log analysis, and notification obligations; infrastructure as code and policy as code as preventive controls; and the honest challenge of applying organisational policy at scale across many teams with legitimate reasons to configure storage differently. No real cloud provider, exposed bucket, or company is named; every scenario is explicitly hypothetical.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
