Secure Coding Courses and Certifications

Career Certificate

OWASP Top 10 & Common Attack Vectors in Python (1-5)

Practice identifying and fixing OWASP Top 10 web vulnerabilities in a Python FastAPI application, focusing on categories A01–A05.

• CodeSignal
• 10 hours
• Self-Paced
• Free Certificate
• 5 courses

A04: Insecure Design

Secure a pastebin application by fixing design flaws in credential recovery, bot protection, quotas, and audit trails.

• CodeSignal
• 2 hours
• Self-Paced
• Free Certificate

Career Certificate

Creating a Secure Application following OWASP Risks 6-10

Build secure Express (TypeScript) applications by addressing OWASP Top 10 risks 6–10, including MFA, secure configuration, and SSRF prevention.

• CodeSignal
• 10 hours
• Self-Paced
• Free Certificate
• 5 courses

Career Certificate

Secure Python Application following OWASP Risks 6-10

Learn to harden FastAPI applications against OWASP Top 10 risks through authentication, MFA, data integrity, secure configuration, SSRF prevention, and monitoring.

• CodeSignal
• 10 hours
• Self-Paced
• Free Certificate
• 5 courses

Career Certificate

OWASP Top 10 & Common Attack Vectors with Java (1-5)

Practice identifying and fixing the first five OWASP Top 10 vulnerabilities in a Java web application.

• CodeSignal
• 10 hours
• Self-Paced
• Free Certificate
• 5 courses

Server-Side Request Forgery (SSRF)

Hands-on exploitation and defense of SSRF vulnerabilities across URL imports, webhooks, redirects, DNS validation, and protocol abuse.

• CodeSignal
• 3 hours
• Self-Paced
• Free Certificate

A03: Injection

Learn to exploit and prevent injection flaws in SQL queries, HTML, and system commands using validation, sanitization, parameterized queries, and safe execution.

• CodeSignal
• 2 hours
• Self-Paced
• Free Certificate

Career Certificate

Creating a Secure Java Application following OWASP Risks 6-10

Build secure Spring Boot applications by addressing OWASP Top 10 risks 6–10, including MFA, secure configuration, and SSRF prevention.

• CodeSignal
• 10 hours
• Self-Paced
• Free Certificate
• 5 courses

OAuth Fundamentals & Mock Implementation

Learn OAuth 2.0 through a mock Google provider, implementing authorization code flow and securing state validation and error handling in a TypeScript/Express app.

• CodeSignal
• 2 hours
• Self-Paced
• Free Certificate

Secure Programming of Web Applications - Developers and TPMs

7023 ratings at Udemy

Web Application Security for Software Developers and Technical Project Managers

• Udemy
• 1 hour 50 minutes
• Self-Paced
• Paid Course

Exploiting and Securing Vulnerabilities in Java Applications

68 ratings at Coursera

Exploit and then patch WebGoat's flaws: cross-site scripting, SQL injection, authentication bypass, JSON Web Tokens and vulnerable components, building fixed Java binaries with OWASP Dependency Checker.

• Coursera
• 4 weeks, 6 hours a week
• Self-Paced
• Paid Course

Crack the Code: Mastering the OWASP Top 10 version 2021-2026

5437 ratings at Udemy

From Theory to Practice: Real-World Tactics for Securing Modern Web Applications

• Udemy
• 1 hour 42 minutes
• Self-Paced
• Paid Course

[NEW] Cyber Security 2020

4298 ratings at Udemy

web security and clever attacks, defenses, and techniques for writing secure code

• Udemy
• 5 hours
• Self-Paced
• Free Online Course

Application Security for Developers and DevOps Professionals

256 ratings at Coursera

Identify and fix application vulnerabilities: apply DevSecOps across the SDLC, run static, dynamic and vulnerability analysis, mitigate OWASP Top 10 risks, and store secrets securely.

• Coursera
• 4 weeks, 4 hours a week
• Self-Paced
• Paid Course

Cyber Security: DevSecOps

11 ratings at Coursera

Build security into every commit, build, and deploy: secure coding and API hardening, static analysis, SLSA and SBOMs, Azure containers and Kubernetes, and MLSecOps.

• Coursera
• 6 weeks, 3 hours a week
• Self-Paced
• Paid Course