PortSwigger
FreePortSwigger Web Security Academy
Free web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
John Wiley & Sons — Wiley Skills Network
Explore Wiley’s secure-coding course on least privilege, input handling, output encoding, passwords, file operations and security-focused design.
Opens on the provider’s site. Check current access and certificate terms there.
Wiley connects core security principles with coding decisions such as handling input, rendering output and managing access. Passwords, uploads, database operations and design choices provide examples. It suits programmers who want to explain the reasoning behind a control and understand how a familiar feature can fail when its assumptions are incomplete.
Intermediate learners with programming familiarity; this is the first course in Wiley’s secure-coding sequence, with further technology-specific study available separately.
Practice in a course lab or an application you are authorized to test, using fictional accounts and sample data. Security tools and framework defaults change, so compare examples with current documentation. A passing exercise or AI-generated suggestion does not establish that an application is secure; explain the threat, the control and how you verified its behavior.
Coursera offers paid enrollment or subscription access. Check the enrollment screen for assessment and certificate terms, trials and any financial-aid options. Provider access terms can change; review them before paying.
Review a fictional upload feature and list its trust assumptions. Propose validation, access and storage checks, then explain what evidence would show that each control works.
This overview is based on the provider's published information, checked on . It is an editorial assessment, not a claim that we completed the resource. Time filters are approximate study ranges; projects and exercises can take longer.
Took this course? Share what you thought.
Other learning resources covering the same topic.
PortSwigger
FreeFree web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
Coursera
PaidExplore UC Davis’ secure-coding course on programming philosophy, design principles, robust code and methods for reasoning about failure.
Coursera
PaidExplore Microsoft’s web-security course on injection, XSS, CSRF, input validation and Copilot-assisted review, with a capstone application…
Coursera
PaidExplore Infosec’s course on OWASP risk assessment, broken access control, cryptographic failures, injection, insecure design and…
Coursera
PaidExplore Minnesota’s application-security course on risks, architecture, authentication, sessions, cryptography and scripts in a cloud…
Coursera
PaidExplore Edureka’s secure-development course on software risk, secure lifecycle practices, application controls, DevSecOps and security…