Catalog

Courses built for diffs, reviews, and shipping

Use the tools below to narrow twelve programs spanning OWASP labs, identity patterns, and supply chain hygiene. Pricing stays informational—confirm details with our team before procurement.

Showing 12 of 12 courses

IntermediateApplication security

OWASP Top Ten Applied Lab

Hands-on labs that map each OWASP category to concrete fixes in Java and TypeScript services you already run.

Duration: 6 weeks · 48 hours
Format: Cohort with async labs
Language: English
Certificate: Included

Open syllabus

IntermediateArchitecture

Threat Modeling for Web APIs

Stride-style modeling workshops that connect abuse cases to API routes, scopes, and rate limits.

Duration: 4 weeks · 26 hours
Format: Hybrid workshops
Language: English
Certificate: Included

Open syllabus

BeginnerProcess

Secure SDLC Foundations

Translate policy PDFs into engineering rituals: branching rules, CI gates, and lightweight security champions.

Duration: 5 weeks · 30 hours
Format: Self-paced + live clinics
Language: English
Certificate: Not included

Open syllabus

AdvancedCryptography

Cryptography for Developers

Use libsodium and Web Crypto safely: keys, rotations, AEAD choices, and what to never implement yourself.

Duration: 5 weeks · 34 hours
Format: Cohort
Language: English
Certificate: Included

Open syllabus

AdvancedInfrastructure

Container and Kubernetes Hardening

Lock down namespaces, admission policies, and supply chain hooks without freezing developer velocity.

Duration: 6 weeks · 40 hours
Format: Cohort + labs
Language: English
Certificate: Included

Open syllabus

IntermediateIdentity

Authentication Patterns in TypeScript

Session stores, refresh rotation, and device binding written in TypeScript with strict typing discipline.

Duration: 5 weeks · 32 hours
Format: Cohort
Language: English
Certificate: Included

Open syllabus

IntermediateValidation

Input Validation and OWASP ASVS

Map ASVS Level 2 controls to validation libraries, schema design, and API error contracts.

Duration: 4 weeks · 28 hours
Format: Hybrid
Language: English
Certificate: Included

Open syllabus

IntermediateOperations

Incident Response Playbooks for App Teams

Tight loops between developers, CSIRT, and legal with templates that survive regulatory inquiries in Japan.

Duration: 3 weeks · 18 hours
Format: Intensive workshops
Language: English
Certificate: Not included

Open syllabus

BeginnerTesting

Shift-Left Security Testing

Embed SAST, DAST, and dependency signals into PR workflows developers actually read.

Duration: 4 weeks · 24 hours
Format: Self-paced + demos
Language: English
Certificate: Included

Open syllabus

IntermediatePrivacy

Privacy by Design Engineering

Engineer data minimization, retention jobs, and DPIA-friendly telemetry without freezing analytics.

Duration: 5 weeks · 30 hours
Format: Cohort
Language: English
Certificate: Included

Open syllabus

BeginnerSupply chain

Supply Chain Security for npm Teams

Lockfiles, provenance, and dependency review rituals for fast-moving JavaScript monorepos.

Duration: 3 weeks · 20 hours
Format: Bootcamp weeks
Language: English
Certificate: Not included

Open syllabus

AdvancedCode review

Advanced Secure Code Review

Senior reviewers learn to spot subtle auth bypasses, TOCTOU issues, and concurrency traps in large diffs.

Duration: 6 weeks · 36 hours
Format: Mentor-intensive
Language: English
Certificate: Included

Open syllabus