There are lots of good places to learn security. These are a few worth your time, whether you take our course, learn on your own or put together a bit of both.
Our approach is different: we try to make the whole process feel manageable, from asking permission to writing a report someone can act on.
BugClub HQ brings a class of up to 12 through eight weeks together. There's a live session each week from week 1, practice apps built to be broken and feedback from me on every write-up. The aim is to help you build good judgment, explain what you found and know what to do next.
That rhythm suits people who like a class, a teacher and a reason to keep showing up. A different format might suit you better. The programs below do good work, and any of them can be part of your learning alongside BugClub HQ.
See how our course worksGuided lessons, a puzzle to untangle or a team to work with. There's a lot to like here.
Web application security
An excellent place to dig into how web bugs work. The Academy pairs explanations with interactive labs on topics such as SQL injection, access control and cross-site scripting, and the training is free. Its depth is a real strength: you can spend time with one kind of bug, try several variations and build a much better feel for it.
Explore Web Security AcademyA guided start from the basics
A welcoming option when you're curious about security and want help figuring out where to start. Its beginner path builds from computers, networks and the web into hands-on security exercises, right in the browser. That combination of guidance and small practical steps makes it a strong choice for getting comfortable and discovering which parts of the subject you enjoy.
Explore TryHackMe's beginner pathDetailed lessons with practical targets
A strong fit if you like understanding the reasoning behind a technique, then trying it yourself. Academy combines structured modules, detailed explanations and practical exercises on provided targets. There's material for building your foundations and room to keep going as you get more experienced. It's a good place to slow down, understand a topic and test what you've learned.
Explore Hack The Box AcademyFree challenges from Carnegie Mellon
You may know it as picoCTF. Carnegie Mellon's platform is now CyLab Security Academy, with free capture-the-flag challenges, learning paths and competitions. A challenge gives you something concrete to puzzle over and a satisfying moment when it clicks. It's a wonderful way to explore subjects such as web security, cryptography and forensics, at your own pace or with a class.
Explore CyLab Security AcademyDefense and teamwork for school students
A great option for middle and high school students who want to learn with a team. In its cyber defense competition, students find and fix problems in virtual systems while keeping important services running. That gives the work a useful purpose and makes room for people to bring different strengths. If protecting systems and working through problems together sound appealing, give it a look.
Explore CyberPatriotPractice with an individual and team competition
A good choice for students who enjoy having an event to work toward. NCL combines a practice environment with individual and team games, covering areas such as forensics, log analysis, cryptography and web security. The range of challenges helps you discover what you're good at and what you want to practice next, while the team game gives you a chance to figure things out together.
Explore National Cyber LeagueA lab library, a school team and a weekly class can all fit into the same learning plan. Start with something that makes you want to come back, and keep going.
