A practical course for anyone who has found a vulnerability in software they did not write and cannot patch themselves. It covers confirming you are actually affected before you reach out, finding the channel that actually reaches the person who can act, writing a request that gets answered rather than filed away, the very different case of an open source maintainer who owes you nothing, realistic timelines for a volunteer against a vendor under a support agreement, a reminder cadence that does not read as harassment, and what to do on your own side while you wait.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
