PortSwigger
FreePortSwigger Web Security Academy
Free web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
Infosec — John Wagnon
Explore Infosec’s course on OWASP risk assessment, broken access control, cryptographic failures, injection, insecure design and misconfiguration.
Opens on the provider’s site. Check current access and certificate terms there.
Infosec explains how the OWASP Top Ten is assembled before examining its first five risk categories in the published syllabus. Access control, cryptography, injection, design and configuration supply distinct cases. It suits learners who want to connect a category with organizational risk, while checking the edition against current OWASP guidance rather than assuming the numbering stays fixed.
Intermediate learners with enough application knowledge to follow security examples. The listed categories follow the earlier OWASP structure; compare them with the current edition.
Practice in a course lab or an application you are authorized to test, using fictional accounts and sample data. Security tools and framework defaults change, so compare examples with current documentation. A passing exercise or AI-generated suggestion does not establish that an application is secure; explain the threat, the control and how you verified its behavior.
Coursera offers paid enrollment or subscription access. Check the enrollment screen for assessment and certificate terms, trials and any financial-aid options. Provider access terms can change; review them before paying.
Choose a fictional application feature and identify a relevant risk category. Explain the possible impact and a control, then compare how the current OWASP edition describes that concern.
This overview is based on the provider's published information, checked on . It is an editorial assessment, not a claim that we completed the resource. Time filters are approximate study ranges; projects and exercises can take longer.
View the curriculum and current access options at Coursera.
How YellowCourse describes and checks learning resources.
Took this course? Share what you thought.
Other learning resources covering the same topic.
PortSwigger
FreeFree web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
Coursera
PaidExplore UC Davis’ secure-coding course on programming philosophy, design principles, robust code and methods for reasoning about failure.
Coursera
PaidExplore Microsoft’s web-security course on injection, XSS, CSRF, input validation and Copilot-assisted review, with a capstone application…
Coursera
PaidExplore Minnesota’s application-security course on risks, architecture, authentication, sessions, cryptography and scripts in a cloud…
Coursera
PaidExplore Edureka’s secure-development course on software risk, secure lifecycle practices, application controls, DevSecOps and security…
Coursera
PaidExplore Wiley’s secure-coding course on least privilege, input handling, output encoding, passwords, file operations and security-focused…