PortSwigger
FreePortSwigger Web Security Academy
Free web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
University of Minnesota — Rick Smith
Explore Minnesota’s application-security course on risks, architecture, authentication, sessions, cryptography and scripts in a cloud setting.
Opens on the provider’s site. Check current access and certificate terms there.
Minnesota examines application security through architecture, authentication and session management in cloud environments. Cryptography, providers and scripts extend the discussion beyond a single coding defect. It suits learners who want to connect web-application controls with deployment decisions and understand why managing identity or state is part of the application’s security design.
Intermediate learners interested in application security and cloud architecture, prepared to follow identity, session and deployment concepts.
Practice in a course lab or an application you are authorized to test, using fictional accounts and sample data. Security tools and framework defaults change, so compare examples with current documentation. A passing exercise or AI-generated suggestion does not establish that an application is secure; explain the threat, the control and how you verified its behavior.
Coursera offers paid enrollment or subscription access. Check the enrollment screen for assessment and certificate terms, trials and any financial-aid options. Provider access terms can change; review them before paying.
Map a fictional application’s authentication and session flow. Mark trust boundaries and explain how one control would be checked when the application runs through multiple cloud components.
This overview is based on the provider's published information, checked on . It is an editorial assessment, not a claim that we completed the resource. Time filters are approximate study ranges; projects and exercises can take longer.
Took this course? Share what you thought.
Other learning resources covering the same topic.
PortSwigger
FreeFree web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
Coursera
PaidExplore UC Davis’ secure-coding course on programming philosophy, design principles, robust code and methods for reasoning about failure.
Coursera
PaidExplore Microsoft’s web-security course on injection, XSS, CSRF, input validation and Copilot-assisted review, with a capstone application…
Coursera
PaidExplore Infosec’s course on OWASP risk assessment, broken access control, cryptographic failures, injection, insecure design and…
Coursera
PaidExplore Edureka’s secure-development course on software risk, secure lifecycle practices, application controls, DevSecOps and security…
Coursera
PaidExplore Wiley’s secure-coding course on least privilege, input handling, output encoding, passwords, file operations and security-focused…