SA-APEX · teams
Yes, including your firm. Especially your firm.
Who this is for
Three situations, one credential.
A testing firm
You are being asked by clients how your engineers use AI, and you would rather answer with an independent credential than with a policy PDF you wrote yourself.
An internal security team
Your people test your own estate. You need a defensible standard for what they may put in a model and how they establish that a finding is real.
A buyer of testing
You want a way to ask a vendor a question with a verifiable answer, instead of taking a well-formatted report on trust.
How your engineers are treated
The same exam, graded blind.
| What your engineers get | How it works |
|---|---|
| The same exam as everyone else. | One form set, one rubric, one standard. There is no lighter version for a paying cohort and there never will be. |
| Anonymised grading. | A reviewer sees a candidate handle, not a name and not an employer. A decision about your engineer cannot be attributed to who employs them, in either direction. |
| Tooling they built themselves. | Candidates work from a bare Kali server and a single API token. What they submit is their own engineering, which is also what makes the result portable to your firm. |
| A verifiable credential. | Your clients can check it themselves at any time, with live status. |
Why we are comfortable doing this
The transferable thing here is discipline: classification, isolation, evidence, coverage, accountability. That is precisely what we want the whole industry to have, and none of it requires anything proprietary to teach or to measure.
Team qualification
How a cohort works.
- Included:Eligibility screening for every nominated engineer, individually and on evidence. We will tell you which of your people are not ready, and why.
- Included:A private cohort through Security AI Engineering, scheduled around your engagement calendar.
- Included:Practice-range access with per-candidate isolation — no shared workspace, no cross-visibility between your engineers’ work.
- Included:Exam scheduling with anonymised grading, so a decision about your engineer cannot be attributed to who employs them.
- Included:Aggregate readiness reporting for you: gates met, gaps by domain. Never individual score detail without the candidate’s consent.
- Included:Verifiable credentials your clients can check themselves, with live status.
What we will not do
We will not soften a standard for a cohort, guarantee a pass rate, or issue a completion record that could be mistaken for certification. A credential that bends for a paying team is worth nothing to the clients it is supposed to reassure — including yours.
Talk to the program office
Start with a conversation, not a contract.
Tell us how many engineers, what they do now, and what your clients are asking you. If the honest answer is that your team is not at this level yet, we will say so — that is a cheaper thing to learn in an email than in an exam.
apex@securityarsenal.comCohort pricing is not set — see the open decision log. We publish prices when they are real.