Cybersecurity · Secure development

Secure development

Input validation posture, cryptography misuse pitfalls, deserialization hygiene, SSRF defenses.

Start tutorial

Sponsored

Lesson outline

  1. 61
    Encrypt Data at Rest

    Learn how to encrypt data at rest using cryptography in this Secure development tutorial. Includes hands-on steps, troubleshooting, and what to study next.

  2. 62
    Implement Signed URLs for Downloads

    Learn to implement signed URLs for secure file downloads in this practical secure development lesson. Understand the core concept, explore step-by-step implementation, and troubleshoot common issues. Designed for hands-on learners, this tutorial covers URL signatures, expiration, and access control.

  3. 63
    Add TOTP 2FA

    Add two-factor authentication with TOTP in this secure development lesson. Learn the core concepts, implement a hands-on exercise, troubleshoot common pitfalls, and know what to study next.

  4. 64
    Audit with Safety and Semgrep

    Learn to audit Python code with Safety and Semgrep, covering dependency checks, static analysis, and integrating them into your workflow.

  5. 65
    Secure Upload Content Validation

    Learn to secure file uploads by validating content, not just extensions. Step-by-step guide with hands-on exercise and troubleshooting.

  6. 66
    Configure Logging to Avoid Data Leaks

    Learn how to configure logging to prevent data leaks in your applications. This Secure development lesson covers best practices, hands-on steps, and troubleshooting to keep sensitive information out of logs.

  7. 67
    Mask Sensitive API Fields

    Learn to mask sensitive fields in API responses to prevent data leaks. This lesson covers what to mask, practical steps, and troubleshooting.

  8. 68
    Implement Account Lockout Policies

    Learn how to implement account lockout policies to protect against brute-force attacks. This lesson covers the core concepts, a step-by-step approach, and a hands-on exercise to apply your knowledge.

  9. 69
    Hash Uploads for Duplicate Detection

    Learn how hashing uploads identifies duplicates and flags malicious files. Practical steps, edge cases, and next steps.

  10. 70
    Secure Cookies & Session Flags

    Apply secure cookies and session flags to protect your web app. Learn to set HttpOnly, Secure, SameSite, and other critical session attributes to prevent hijacking and cross-site attacks.

  11. 71
    Reverse-Engineer Public Repos with Git Log

    Learn to safely reverse-engineer public repositories using git log. This secure development lesson covers the core concepts, step-by-step workflow, hands-on exercise, and tips to avoid common pitfalls, helping you analyze code history without compromising security.

  12. 72
    Avoid pickle for untrusted data

    Avoid pickle for untrusted data — Secure development.

    Secure development — step-by-step tutorials

    What you will find here

    This track walks through secure development in order — each lesson is server-rendered HTML you can read without JavaScript. Follow the outline, then practice in the browser IDE when a lesson links to runnable code.

    Tutorials vs quizzes and code samples

    Tutorials teach in sequence. For quick checks use quizzes. For copy-paste snippets see code samples. For deeper reading browse articles.