Training
Cyber Security Fundamentals for Developers
Security as a builder's skill: the OWASP Top 10 hands-on, authentication done right, secrets and dependency hygiene, and the attacker mindset that makes your own code harder to break.
Most breaches don't need genius attackers — they need one developer who didn't know the pattern. This program teaches defensive security from the builder's seat: every OWASP Top 10 class demonstrated hands-on against deliberately vulnerable applications, then fixed properly; authentication and session management as implemented rather than as theorized; and the supply-chain, secrets and configuration hygiene where modern incidents actually start.
The goal is not to mint penetration testers — it's to make every participant the person on their team who spots the injection, questions the token flow, and reviews the dependency bump. Defensive skills, taught through the attacker's eyes, on systems you're authorized to break.
Curriculum
-
1
The attacker mindset: threat modeling your own features
-
2
Injection classes hands-on: SQL, command, template — and the fixes
-
3
XSS and CSRF: browser security model, tokens, content security policy
-
4
Authentication done right: passwords, sessions, MFA, OAuth pitfalls
-
5
Access control failures: IDOR, tenancy leaks, privilege escalation
-
6
Secrets, dependencies and configuration: where real incidents start
-
7
Security in the pipeline: scanning, review checklists, incident basics
