PortSwigger
FreePortSwigger Web Security Academy
Free web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
John Wiley & Sons — Wiley Skills Network
Explore Wiley’s further secure-coding course on APIs, mobile and web frameworks, language-specific weaknesses and technology-aware prevention.
Opens on the provider’s site. Check current access and certificate terms there.
Wiley extends secure coding into particular technologies and languages, including APIs, web frameworks and mobile systems. Memory problems, race conditions and deserialization illustrate why a general principle needs a context-specific implementation. It suits programmers who want to compare security concerns across stacks and avoid assuming that the same control behaves identically in every framework.
Intermediate learners familiar with programming and secure-coding foundations; this continuation is part two of Wiley’s published sequence.
Practice in a course lab or an application you are authorized to test, using fictional accounts and sample data. Security tools and framework defaults change, so compare examples with current documentation. A passing exercise or AI-generated suggestion does not establish that an application is secure; explain the threat, the control and how you verified its behavior.
Coursera offers paid enrollment or subscription access. Check the enrollment screen for assessment and certificate terms, trials and any financial-aid options. Provider access terms can change; review them before paying.
Choose one fictional feature implemented in two technology stacks. Compare the relevant security assumptions and explain a framework-specific setting or control that needs separate verification.
This overview is based on the provider's published information, checked on . It is an editorial assessment, not a claim that we completed the resource. Time filters are approximate study ranges; projects and exercises can take longer.
Took this course? Share what you thought.
Other learning resources covering the same topic.
PortSwigger
FreeFree web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
Coursera
PaidExplore UC Davis’ secure-coding course on programming philosophy, design principles, robust code and methods for reasoning about failure.
Coursera
PaidExplore Microsoft’s web-security course on injection, XSS, CSRF, input validation and Copilot-assisted review, with a capstone application…
Coursera
PaidExplore Infosec’s course on OWASP risk assessment, broken access control, cryptographic failures, injection, insecure design and…
Coursera
PaidExplore Minnesota’s application-security course on risks, architecture, authentication, sessions, cryptography and scripts in a cloud…
Coursera
PaidExplore Edureka’s secure-development course on software risk, secure lifecycle practices, application controls, DevSecOps and security…