A practical methodology course on prioritizing vulnerabilities beyond raw severity. You will learn why a Common Vulnerability Scoring System (CVSS) base score alone is a poor sole prioritization signal, how to read CVSS base, temporal and environmental metrics at a working level, how the Exploit Prediction Scoring System (EPSS) complements CVSS as a probability of exploitation signal, why confirmed exploitation recorded through a Known Exploited Vulnerabilities (KEV) style list is a categorically different and stronger signal, and why reachability and exposure function as a multiplier that most prioritization frameworks miss. A full worked combination framework, using a clearly labelled hypothetical vulnerability dataset, shows exactly how a team turns these signals into a single defensible queue ordering, quantifies how far that ordering diverges from a severity-only queue, and explains how to communicate a prioritization decision to a stakeholder who expected every critical fixed first. No real CVE identifiers are used as case studies; every identifier and every number in the worked examples is a clearly labelled hypothetical.
Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.
None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.
You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.
The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.
