# Alternatives to BugClub HQ

There are lots of good places to learn security. These are a few worth your time, whether you take our course, learn on your own or put together a bit of both.

## How our approach is different

Our approach is different: we try to make the whole process feel manageable, from asking permission to writing a report someone can act on.

BugClub HQ brings a class of up to 12 through eight weeks together. There's a live session each week from week 1, practice apps built to be broken and feedback from me on every write-up. The aim is to help you build good judgment, explain what you found and know what to do next.

That rhythm suits people who like a class, a teacher and a reason to keep showing up. A different format might suit you better. The programs below do good work, and any of them can be part of your learning alongside BugClub HQ.

[See how our course works](https://bugclubhq.com/curriculum)

## Other good places to learn

Guided lessons, a puzzle to untangle or a team to work with. There's a lot to like here.

Web application security

### PortSwigger Web Security Academy

An excellent place to dig into how web bugs work. The Academy pairs explanations with interactive labs on topics such as SQL injection, access control and cross-site scripting, and the training is free. Its depth is a real strength: you can spend time with one kind of bug, try several variations and build a much better feel for it.

[Explore Web Security Academy](https://portswigger.net/web-security)

A guided start from the basics

### TryHackMe

A welcoming option when you're curious about security and want help figuring out where to start. Its beginner path builds from computers, networks and the web into hands-on security exercises, right in the browser. That combination of guidance and small practical steps makes it a strong choice for getting comfortable and discovering which parts of the subject you enjoy.

[Explore TryHackMe's beginner path](https://tryhackme.com/beginner-path)

Detailed lessons with practical targets

### Hack The Box Academy

A strong fit if you like understanding the reasoning behind a technique, then trying it yourself. Academy combines structured modules, detailed explanations and practical exercises on provided targets. There's material for building your foundations and room to keep going as you get more experienced. It's a good place to slow down, understand a topic and test what you've learned.

[Explore Hack The Box Academy](https://academy.hackthebox.com/)

Free challenges from Carnegie Mellon

### CyLab Security Academy

You may know it as picoCTF. Carnegie Mellon's platform is now CyLab Security Academy, with free capture-the-flag challenges, learning paths and competitions. A challenge gives you something concrete to puzzle over and a satisfying moment when it clicks. It's a wonderful way to explore subjects such as web security, cryptography and forensics, at your own pace or with a class.

[Explore CyLab Security Academy](https://www.cylabacademy.org/)

Defense and teamwork for school students

### CyberPatriot

A great option for middle and high school students who want to learn with a team. In its cyber defense competition, students find and fix problems in virtual systems while keeping important services running. That gives the work a useful purpose and makes room for people to bring different strengths. If protecting systems and working through problems together sound appealing, give it a look.

[Explore CyberPatriot](https://www.uscyberpatriot.org/)

Practice with an individual and team competition

### National Cyber League

A good choice for students who enjoy having an event to work toward. NCL combines a practice environment with individual and team games, covering areas such as forensics, log analysis, cryptography and web security. The range of challenges helps you discover what you're good at and what you want to practice next, while the team game gives you a chance to figure things out together.

[Explore National Cyber League](https://nationalcyberleague.org/competition)

## You can mix and match

A lab library, a school team and a weekly class can all fit into the same learning plan. Start with something that makes you want to come back, and keep going.

[See the BugClub HQ course](https://bugclubhq.com/curriculum)[Ask me about the fit](https://bugclubhq.com/contact)