A finding is not a light switch with two positions. This course models the finding lifecycle as a state machine an AppSec practitioner can actually operate: first seen, triaged, assigned, suppressed with expiry, fixed, verified, regressed and reopened. It makes the choice of clock, discovery time, triage time or assignment time, the central argument behind why so many remediation metrics are quietly wrong, works through a full identity test for a finding that returns after a revert or a reintroduction, and closes with the evidence trail an auditor expects across a finding's whole life, including how to tell a real closure from an assumed one. It cross references course 1026 for suppression governance and course 1024 for remediation metric arithmetic rather than repeating either.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
