# BugClub HQ

> An eight-week online course where teenagers learn to find security bugs, write them up and report them the right way.

BugClub HQ runs How To Be Good, an eight-week online course for ages 14 to 17: one self-paced week, then seven weeks with a live session. Students find security bugs in practice apps built to be broken, write them up properly and learn how to tell the right person. Nobody needs to know how to code. The winter cohort starts January 11, 2027, applications close December 18, each cohort is capped at 6 students, and it costs $349 once, in US dollars.

## The course

- [Home](https://bugclubhq.com/index.md): what the course is, who it's for and when the next cohort starts
- [Curriculum](https://bugclubhq.com/curriculum.md): week by week through How To Be Good: the readings, the live sessions, the labs, the write-ups and what it costs
- [FAQ](https://bugclubhq.com/faq.md): how it works, what parents can see, safety, the price and how to apply
- [Apply](https://bugclubhq.com/apply.md): who can apply, what it asks for and what happens after you send it

## For parents

- [For parents](https://bugclubhq.com/parents.md): what a parent account shows and what stays private, how students stay safe, what the course costs and how applying for your kid works

## About and policies

- [Who teaches BugClub HQ](https://bugclubhq.com/about.md): the instructor who runs every cohort
- [The ethics agreement](https://bugclubhq.com/ethics.md): what every student signs with a parent or guardian before week 1
- [Privacy policy](https://bugclubhq.com/privacy.md): what is collected about students and parents, and what it's used for
- [Terms](https://bugclubhq.com/terms.md): the terms for applying and taking the course
- [Refund policy](https://bugclubhq.com/refunds.md): how refunds work

## Blog

- [Blog](https://bugclubhq.com/blog.md): cohort news, what parents should know, and why the course works the way it does
- [Applications for the winter cohort are open](https://bugclubhq.com/blog/winter-cohort-applications.md): Oct 28, 2026. What applying for the BugClub HQ winter cohort involves, what it costs and what happens after you hit send.
- [What the parent account shows, and what it doesn't](https://bugclubhq.com/blog/parent-account.md): Oct 21, 2026. BugClub HQ parents see progress, badges and where each write-up stands. They don't see what their kid wrote. Here's where that line sits.
- [Why week 0 is about permission](https://bugclubhq.com/blog/week-zero-permission.md): Oct 14, 2026. Before any BugClub HQ lab opens, every student spends a week on ethics, permission and how bug bounties work, then signs an agreement with a parent.
- [The course ends with an email to a company that doesn't exist](https://bugclubhq.com/blog/fake-companies.md): Oct 7, 2026. Week 7 of BugClub HQ is about working out who to tell about a security bug, and telling them the right way.

## Contact

- Email: hello@bugclubhq.com

## Machine-readable

- Sitemap: https://bugclubhq.com/sitemap.xml
- Markdown mirror of most pages: append `.md` to the URL.