A focused course on Software Composition Analysis (SCA) as a general discipline, taught independent of any single ecosystem's specific dependency management tooling. You will work through the fundamental inventory, match, and surface workflow that holds across every ecosystem; the critical distinction between a direct dependency and a transitive one several layers deep; the version resolution problem, where a manifest's declared range differs from what a lockfile or an actual installed environment shows is really present; the two false positive and false negative sources specific to SCA, an imprecise vulnerability affected-range and an unrecognised component rename or fork; the relationship between SCA output and a Software Bill of Materials (SBOM), both producing and consuming one; integrating SCA into a build pipeline so matching runs continuously rather than periodically; and the honest limit of what SCA can and cannot detect relative to an organisation's own code and to vulnerabilities not yet discovered.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
