We are pleased to announce the launch of the Web Security Academy. 

This is a brand new learning resource providing training on web security vulnerabilities, techniques for finding and exploiting bugs, and defensive measures for avoiding them.

The Web Security Academy contains interactive learning materials, including real vulnerability labs that you can access instantly online to practice what you are learning.

Best of all, the Web Security Academy is completely free!

To get things started, we are covering four "classic" web security vulnerabilities:

• SQL injection
• Cross-site scripting (XSS)
• OS command injection
• File path traversal (directory traversal)

We'll be adding new topics and many more vulnerability labs soon. This will be a living and actively maintained resource that we'll continue updating, to eventually cover the full range of web security vulnerabilities and the latest developments in web security research.

Have fun, and as always, feedback is very welcome!

Access the Web Security Academy