PortSwigger
FreePortSwigger Web Security Academy
Free web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
University of California, Davis — Matthew Bishop, PhD
Explore UC Davis’ secure-coding course on programming philosophy, design principles, robust code and methods for reasoning about failure.
Opens on the provider’s site. Check current access and certificate terms there.
UC Davis starts secure programming with design principles and the relationship between robustness and security. Worked programming examples show how ordinary coding problems can create security weaknesses. It suits programmers who want to reason about failure and assumptions, rather than begin with a catalog of attack tools or isolated vulnerability names.
Intermediate programmers with one to two years of experience in a language such as C, C++ or Java, as recommended by the provider.
Practice in a course lab or an application you are authorized to test, using fictional accounts and sample data. Security tools and framework defaults change, so compare examples with current documentation. A passing exercise or AI-generated suggestion does not establish that an application is secure; explain the threat, the control and how you verified its behavior.
Coursera offers paid enrollment or subscription access. Check the enrollment screen for assessment and certificate terms, trials and any financial-aid options. Provider access terms can change; review them before paying.
Review a small fictional input-handling function. State its assumptions, propose boundary cases and explain how you would verify that an error produces a controlled result.
This overview is based on the provider's published information, checked on . It is an editorial assessment, not a claim that we completed the resource. Time filters are approximate study ranges; projects and exercises can take longer.
Took this course? Share what you thought.
Other learning resources covering the same topic.
PortSwigger
FreeFree web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
Coursera
PaidExplore Microsoft’s web-security course on injection, XSS, CSRF, input validation and Copilot-assisted review, with a capstone application…
Coursera
PaidExplore Infosec’s course on OWASP risk assessment, broken access control, cryptographic failures, injection, insecure design and…
Coursera
PaidExplore Minnesota’s application-security course on risks, architecture, authentication, sessions, cryptography and scripts in a cloud…
Coursera
PaidExplore Edureka’s secure-development course on software risk, secure lifecycle practices, application controls, DevSecOps and security…
Coursera
PaidExplore Wiley’s secure-coding course on least privilege, input handling, output encoding, passwords, file operations and security-focused…