Backend & Infrastructure
Best Application Security Courses
Editor's top Application Security courses
1PortSwigger Web Security Academy
PortSwigger
You cannot defend what you cannot exploit — the Academy's free interactive labs build the attacker intuition that makes threat modelling and code review real rather than checklist theatre. The standard training resource on both sides of the offense/defense line.
Access freeApplication Security Courses for Beginners
1PortSwigger Web Security Academy
PortSwigger
You cannot defend what you cannot exploit — the Academy's free interactive labs build the attacker intuition that makes threat modelling and code review real rather than checklist theatre. The standard training resource on both sides of the offense/defense line.
Access freeIntermediate & Advanced Application Security Courses
1OWASP Juice Shop
OWASP Foundation
A deliberately vulnerable modern web app (Angular/Node) with ~100 built-in challenges — the standard practice target for security testing skills and the tool most AppSec teams use to run internal secure-coding workshops.
Access freeMore courses being reviewed
We continuously curate the best Application Security courses. Check back soon.
Application Security resources
2 free courses
Free access options — some may have optional paid upgrades.