Vulnerability Management and Remediation with Safeguard

IntermediateFree10 modules · 23 lessons · ~56 min

About this course

Learn how Safeguard finds vulnerabilities, scores component risk with Risk Score and SCAL, prioritizes what actually matters with reachability analysis, and fixes issues autonomously with Griffin, enforced by policies, gates, and guardrails.

What you'll learn

Understanding Vulnerabilities

CVE Basics and Where Safeguard Finds Them
Severity, CVSS, EPSS, and CISA KEV

Safeguard's Scoring Systems

Risk Score (RS)
SCAL and LCAL Attestation Levels

Prioritization: Reachability Analysis

What Is Reachability?
From Findings List to Action: Cutting the Noise

Remediation and Governance

AI Auto-Fix with Griffin Remediate
Policies, Gates, and Guardrails

Triage at Scale: Workflow and Discipline

Designing a Triage Funnel That Survives 10,000 Findings
VEX in Practice: Justifications, Sources, and Consumption
Suppression Discipline and the Audit Trail
Ingesting and Normalising Results from Other Scanners

Remediation Strategies and the Autonomous Matrix

The Eight Categories and Their Strategies
Reading and Reviewing a Griffin Remediation PR
Mitigation When You Cannot Patch

Program Measurement and Executive Reporting

Metrics That Change Behaviour
Scaling Across Organisations, Products, and Teams

CVSS in Depth: Vectors, Versions, and Re-Scoring

Decoding a CVSS v3.1 Vector, Metric by Metric
Environmental Re-Scoring: Making the Score Describe Your Deployment

Reachability Analysis: Mechanisms and Failure Modes

How Reachability Is Actually Determined
Where Reachability Fails, and How to Handle 'Unknown'

Containers, Runtime Context, and Self-Healing

Layer-Attributed Triage and Base Image Strategy
Runtime Context as a Prioritisation Input

01Understanding Vulnerabilities2 lessons

CVE Basics and Where Safeguard Finds Them7 min
Severity, CVSS, EPSS, and CISA KEV7 min

02Safeguard's Scoring Systems2 lessons

Risk Score (RS)

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

SCAL and LCAL Attestation Levels7 min

03Prioritization: Reachability Analysis2 lessons

What Is Reachability?7 min
From Findings List to Action: Cutting the Noise6 min

04Remediation and Governance2 lessons

AI Auto-Fix with Griffin Remediate8 min
Policies, Gates, and Guardrails7 min

05Triage at Scale: Workflow and Discipline4 lessons

Designing a Triage Funnel That Survives 10,000 Findings
VEX in Practice: Justifications, Sources, and Consumption
Suppression Discipline and the Audit Trail
Ingesting and Normalising Results from Other Scanners

06Remediation Strategies and the Autonomous Matrix3 lessons

The Eight Categories and Their Strategies
Reading and Reviewing a Griffin Remediation PR
Mitigation When You Cannot Patch

07Program Measurement and Executive Reporting2 lessons

Metrics That Change Behaviour
Scaling Across Organisations, Products, and Teams

08CVSS in Depth: Vectors, Versions, and Re-Scoring2 lessons

Decoding a CVSS v3.1 Vector, Metric by Metric
Environmental Re-Scoring: Making the Score Describe Your Deployment

09Reachability Analysis: Mechanisms and Failure Modes2 lessons

How Reachability Is Actually Determined
Where Reachability Fails, and How to Handle 'Unknown'

10Containers, Runtime Context, and Self-Healing2 lessons

Layer-Attributed Triage and Base Image Strategy
Runtime Context as a Prioritisation Input

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.