Build practical programming and technology skills

Secure Coding Fundamentals

Identify trust boundaries, validate untrusted input, protect credentials, apply authentication and authorization safely, and reduce common risks.

View curriculum

PractitionerDifficulty

40 hoursEstimated time

8 modules32 lessons

5 guided labsKnowledge check

Plan your learning

Path Brief

Skills you will practice

Core · Secure Coding Fundamentals
Core · Security Thinking For Developers
Core · Input And Output Safety
Core · Authentication
Core · Authorization
Core · Secrets And Sensitive Data

Prerequisites

Programming Foundations
Http Apis

Tools

A current web browser
A code editor or terminal appropriate to the path
A safe local or virtual lab environment

Before you begin

What you need

Programming Foundations
Http Apis

Step-by-step curriculum

Learning modules

Complete lessons in order or open the module that matches your current goal. Your lesson progress is saved on this device.

01Security Thinking for DevelopersBuild practical skill in security thinking for developers and connect it to the outcomes of Secure Coding Fundamentals.4 lessons · 1 lab

Lesson 1

Security Thinking for Developers: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Security Thinking for Developers in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Security Thinking for Developers in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Security Thinking for Developers safely and repeatably.

25 min

Lesson 3

Build a Practical Security Thinking for Developers Example in Secure Coding Fundamentals

Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

30 min

Lesson 4

Debug Common Security Thinking for Developers Problems in Secure Coding Fundamentals

Recognize common failure modes in Security Thinking for Developers, use the relevant diagnostics, and verify the correction.

25 min

Guided lab · 55 min · Safe

Guided Lab: Security Thinking for Developers in Secure Coding Fundamentals

Secure Coding Fundamentals — Security Thinking for Developers lab: Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

Not started

02Input and Output SafetyBuild practical skill in input and output safety and connect it to the outcomes of Secure Coding Fundamentals.4 lessons · 1 lab

Lesson 1

Input and Output Safety: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Input and Output Safety in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Input and Output Safety in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Input and Output Safety safely and repeatably.

25 min

Lesson 3

Build a Practical Input and Output Safety Example in Secure Coding Fundamentals

Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

30 min

Lesson 4

Debug Common Input and Output Safety Problems in Secure Coding Fundamentals

Recognize common failure modes in Input and Output Safety, use the relevant diagnostics, and verify the correction.

25 min

Guided lab · 55 min · Moderate

Guided Lab: Input and Output Safety in Secure Coding Fundamentals

Secure Coding Fundamentals — Input and Output Safety lab: Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

Not started

03AuthenticationBuild practical skill in authentication and connect it to the outcomes of Secure Coding Fundamentals.4 lessons · 1 lab

Lesson 1

Authentication: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Authentication in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Authentication in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Authentication safely and repeatably.

25 min

Lesson 3

Build a Practical Authentication Example in Secure Coding Fundamentals

Build a sign-in flow with one successful and one failed authentication case.

30 min

Lesson 4

Debug Common Authentication Problems in Secure Coding Fundamentals

Recognize common failure modes in Authentication, use the relevant diagnostics, and verify the correction.

25 min

Guided lab · 55 min · Moderate

Guided Lab: Authentication in Secure Coding Fundamentals

Secure Coding Fundamentals — Authentication lab: Build a sign-in flow with one successful and one failed authentication case.

Not started

04AuthorizationBuild practical skill in authorization and connect it to the outcomes of Secure Coding Fundamentals.4 lessons · 1 lab

Lesson 1

Authorization: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Authorization in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Authorization in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Authorization safely and repeatably.

25 min

Lesson 3

Build a Practical Authorization Example in Secure Coding Fundamentals

Create one protected action and test an allowed identity and a denied identity.

30 min

Lesson 4

Debug Common Authorization Problems in Secure Coding Fundamentals

Recognize common failure modes in Authorization, use the relevant diagnostics, and verify the correction.

25 min

Guided lab · 55 min · Moderate

Guided Lab: Authorization in Secure Coding Fundamentals

Secure Coding Fundamentals — Authorization lab: Create one protected action and test an allowed identity and a denied identity.

Not started

05Secrets and Sensitive DataBuild practical skill in secrets and sensitive data and connect it to the outcomes of Secure Coding Fundamentals.4 lessons · 1 lab

Lesson 1

Secrets and Sensitive Data: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Secrets and Sensitive Data in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Secrets and Sensitive Data in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Secrets and Sensitive Data safely and repeatably.

25 min

Lesson 3

Build a Practical Secrets and Sensitive Data Example in Secure Coding Fundamentals

Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

30 min

Lesson 4

Debug Common Secrets and Sensitive Data Problems in Secure Coding Fundamentals

Recognize common failure modes in Secrets and Sensitive Data, use the relevant diagnostics, and verify the correction.

25 min

Guided lab · 55 min · Moderate

Guided Lab: Secrets and Sensitive Data in Secure Coding Fundamentals

Secure Coding Fundamentals — Secrets and Sensitive Data lab: Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

Not started

06Web and API SecurityBuild practical skill in web and api security and connect it to the outcomes of Secure Coding Fundamentals.4 lessons

Lesson 1

Web and API Security: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Web and API Security in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Web and API Security in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Web and API Security safely and repeatably.

25 min

Lesson 3

Build a Practical Web and API Security Example in Secure Coding Fundamentals

Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

30 min

Lesson 4

Debug Common Web and API Security Problems in Secure Coding Fundamentals

Recognize common failure modes in Web and API Security, use the relevant diagnostics, and verify the correction.

25 min

07Dependencies and DeploymentBuild practical skill in dependencies and deployment and connect it to the outcomes of Secure Coding Fundamentals.4 lessons

Lesson 1

Dependencies and Deployment: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Dependencies and Deployment in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Dependencies and Deployment in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Dependencies and Deployment safely and repeatably.

25 min

Lesson 3

Build a Practical Dependencies and Deployment Example in Secure Coding Fundamentals

Deploy a small version change to a disposable environment, verify health, then practice a rollback.

30 min

Lesson 4

Debug Common Dependencies and Deployment Problems in Secure Coding Fundamentals

Recognize common failure modes in Dependencies and Deployment, use the relevant diagnostics, and verify the correction.

25 min

08Secure Development PracticeBuild practical skill in secure development practice and connect it to the outcomes of Secure Coding Fundamentals.4 lessons

Lesson 1

Secure Development Practice: Core Concepts for Secure Coding Fundamentals

Understand the concepts, decisions, and vocabulary you need before applying Secure Development Practice in Secure Coding Fundamentals.

25 min

Lesson 2

Set Up and Explore Secure Development Practice in Secure Coding Fundamentals

Prepare the tools, data, project state, or test environment needed to explore Secure Development Practice safely and repeatably.

25 min

Lesson 3

Build a Practical Secure Development Practice Example in Secure Coding Fundamentals

Threat-model a small endpoint or feature, add one input/output defense and one authorization or secret-handling control, then test an abuse case.

30 min

Lesson 4

Debug Common Secure Development Practice Problems in Secure Coding Fundamentals

Recognize common failure modes in Secure Development Practice, use the relevant diagnostics, and verify the correction.

25 min

Portfolio integration

Capstone Project

Secure a Small Database-Backed Application

Combine the path skills in a portfolio-ready project with clear functional requirements, tests, verification evidence, and operating notes.

GuidedIndependentPortfolio

Acceptance criteria

The core workflow works from start to finish.
Invalid input or failure states are handled clearly.
The result is tested and documented.
A reviewer can reproduce the setup and verification.

Continue in Programming

Related Programming

Skill assessment

Secure Coding Fundamentals

Path Brief

Skills you will practice

Prerequisites

Tools

What you need

Learning modules

Security Thinking for Developers: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Security Thinking for Developers in Secure Coding Fundamentals

Build a Practical Security Thinking for Developers Example in Secure Coding Fundamentals

Debug Common Security Thinking for Developers Problems in Secure Coding Fundamentals

Guided Lab: Security Thinking for Developers in Secure Coding Fundamentals

Input and Output Safety: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Input and Output Safety in Secure Coding Fundamentals

Build a Practical Input and Output Safety Example in Secure Coding Fundamentals

Debug Common Input and Output Safety Problems in Secure Coding Fundamentals

Guided Lab: Input and Output Safety in Secure Coding Fundamentals

Authentication: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Authentication in Secure Coding Fundamentals

Build a Practical Authentication Example in Secure Coding Fundamentals

Debug Common Authentication Problems in Secure Coding Fundamentals

Guided Lab: Authentication in Secure Coding Fundamentals

Authorization: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Authorization in Secure Coding Fundamentals

Build a Practical Authorization Example in Secure Coding Fundamentals

Debug Common Authorization Problems in Secure Coding Fundamentals

Guided Lab: Authorization in Secure Coding Fundamentals

Secrets and Sensitive Data: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Secrets and Sensitive Data in Secure Coding Fundamentals

Build a Practical Secrets and Sensitive Data Example in Secure Coding Fundamentals

Debug Common Secrets and Sensitive Data Problems in Secure Coding Fundamentals

Guided Lab: Secrets and Sensitive Data in Secure Coding Fundamentals

Web and API Security: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Web and API Security in Secure Coding Fundamentals

Build a Practical Web and API Security Example in Secure Coding Fundamentals

Debug Common Web and API Security Problems in Secure Coding Fundamentals

Dependencies and Deployment: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Dependencies and Deployment in Secure Coding Fundamentals

Build a Practical Dependencies and Deployment Example in Secure Coding Fundamentals

Debug Common Dependencies and Deployment Problems in Secure Coding Fundamentals

Secure Development Practice: Core Concepts for Secure Coding Fundamentals

Set Up and Explore Secure Development Practice in Secure Coding Fundamentals

Build a Practical Secure Development Practice Example in Secure Coding Fundamentals

Debug Common Secure Development Practice Problems in Secure Coding Fundamentals

Capstone Project

Secure a Small Database-Backed Application

Acceptance criteria

Test your understanding

Related Programming

Check your starting point

Plan the capstone

Explore related paths