Security for the people writing the code, not for a specialist team.
Watch a free preview30-day refund, no questions asked
Training a team?
Volume pricing from five seats, with assignment, reminders and completion reporting included.
See team plans →Each maps to the same taxonomy your organization’s roles are defined in, so progress here moves your skill profile.
Sofia Novak has broken into banks, hospitals and a rail operator. This course teaches what she looks for, so you can find it first. Threat modelling, the vulnerability classes that keep recurring, secure defaults, and how to make security review a normal part of shipping.
3 modules · 13 lessons · 7h
The mental shift, and a repeatable process.
Sofia has run red team engagements against banks, hospitals and one national rail operator. She teaches security to people who build software rather than to specialists, on the grounds that this is where the leverage is. Her threat modelling exercises are the most-completed practical assessments on the platform.
2,617 reviews
Genuinely good, with one caveat: the first module moves slowly if you already know the basics. Skip to module two if you do — the rest is excellent and the case studies are specific rather than generic.
Solid content, but I came in from a non-technical background and the assumed knowledge in module four caught me out. The prerequisites could be clearer about that. Everything before it was excellent.
The instructor is honest about what does not work, which is rarer than it should be. There is a whole lesson on a failed approach and why it failed. I learned more from that than from most successful case studies.
Types that catch real bugs without making the codebase unreadable.
Daniel Roth
62.8K
Measure, then fix — in that order, every time.
Daniel Roth · Ben Kowalski
47.1K
Designed around real postmortems, because that is where the lessons are.
Arjun Mehta
51.3K