Training, built around your team
We do not run a public course schedule. Training is scoped as a custom engagement and taught by the consultants who do this work, which usually means whoever on our team knows your stack best. Everything is lab work against real applications.
This is a small part of what we do, so it is always by request. If you are here for a penetration test rather than training, our assessment services are the main event.
What we have taught
Three courses we run most often
Starting points rather than a catalogue. Most engagements end up as a mix, weighted towards whatever your team ships.
Introduction to Web Application Penetration Testing
Learn the tools and techniques for conducting a web application penetration test. Designed for those with little to no web application penetration testing experience, although it moves quickly.
What you leave able to do
- HTTP fundamentals and Burp Suite
- Introduction to web application penetration testing methodology
- Hands-on challenges exploiting real web applications
- Foundational understanding of a web application penetration test
Advanced Web Application Penetration Testing
Take your skills beyond the basics. For testers who understand the OWASP Top 10 and want to tackle moderate-to-advanced web application attacks.
What you leave able to do
- Moderate to advanced web application attacks
- Advanced assessment techniques and tooling
- Hands-on challenges exploiting complex web applications
- Deep-dive web application penetration test methodology
Application Security Training for Developers
Familiarize your development team with application security concepts, methodologies, and common vulnerabilities through real-world scenarios and hands-on lab exercises.
What you leave able to do
- Common web application attacks and defenses
- OWASP Top 10 in-depth coverage
- Development best practices and secure coding patterns
- Threat modeling and internal security tooling
Also asked for
Tell us what your team needs to learn
Say who the audience is, what they build, and how long you can give us. We will come back with an outline and a price, or tell you if a course is not the right answer.