A reperformance-based course for auditors who must test provenance and signature claims rather than accept them: SLSA levels as criteria, in-toto attestations, Sigstore certificates and Rekor log entries, long-lived keys and registry signatures, containers and admission control, and Safeguard's Attestation and Provenance tabs treated as management information. You will learn to build a release population, sample it, run the seven-step verification, spot forged or misattributed attestations, and write findings mapped to SSDF, EO 14028, ISO 27001 and SOC 2.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
