Secure Coding for Developers

Write code that attackers cannot break — mapped to the OWASP Top 10.

⏱ 14 hours ▤ 26 lessons ◎ 1 enrolled ✦ Certificate on completion

About this course

Most vulnerabilities are introduced by well-meaning developers who were never taught to think like an attacker. This course closes that gap. Organised around the OWASP Top 10, each module shows you a class of vulnerability from both sides: how it is exploited, and how to write code that is immune to it.

Examples span PHP, JavaScript and Python, so the lessons transfer to whatever stack you work in. You will fix real vulnerable code, add the tests that prevent regressions, and learn to run security tooling as part of your pipeline.

Aimed at working developers who want to ship secure software without slowing down.

Syllabus

01 Thinking like an attacker 3 lessons · 35 min

02 Injection & output encoding 5 lessons · 55 min

03 Authentication & access control 5 lessons · 60 min

04 Crypto & secrets done right 5 lessons · 55 min

05 Security in your pipeline 4 lessons · 45 min

Your instructor

Noura Al-Otaibi

Senior Software & Cloud Instructor

Full-stack engineer and AWS Solutions Architect. Noura has shipped production systems for fintech and logistics startups in the Gulf, and specialises in making cloud and back-end engineering approachable for career-changers.

Course materials

Secure Coding for Developers — syllabus (PDF) Download ↓

Secure Coding for Developers — lab pack (PDF) Enroll to unlock