Learning path · Intermediate

Security Foundations

Design, ship and defend a web service.

Start with the web and server fundamentals, then add databases, containers and a threat-model-driven security practice. Built for developers who ship.

10 weeks 5 courses 56 lessons 5 certificates

Start this path Browse tutorials

The sequence

5 courses, in the right order.

Each step assumes only what came before it. Follow the sequence or jump to a course you need.

Step 1 · Beginner

HTML Foundations

Open course

Start from a blank file and finish with a real, accessible profile page. Learn document structure, semantics, media, metadata, ARIA and modern native elements — everything a website is built on.

Getting startedBeginner foundationsContent and structureBeyond the basicsShip it

0/16 lessons0%

HTML Foundations

Step 2 · Intermediate

Node.js Foundations

Open course

Move from browser JavaScript to reliable server code. Learn modules, HTTP, Express, asynchronous errors, authentication and the security headers a real API needs.

From script to service

0/10 lessons0%

Node.js Foundations

Step 3 · Intermediate

PostgreSQL Foundations

Open course

Go beyond basic SQL. Design schemas, write joins and aggregations, read query plans, add the right indexes and protect data with transactions and roles.

A database you can operate

0/10 lessons0%

PostgreSQL Foundations

Step 4 · Beginner

Docker Foundations

Open course

Understand images, containers, layers, volumes and networks. Write a production-minded Dockerfile, compose a multi-service stack and reduce the attack surface of what you ship.

Ship the environment with the app

0/10 lessons0%

Docker Foundations

Step 5 · Beginner

Cybersecurity Foundations

Open course

Learn threat modelling, authentication, web attack classes, browser defenses and incident response. A practical security baseline for developers who ship real applications.

A security baseline you can use

0/10 lessons0%

Cybersecurity Foundations

Portfolio project

Threat model and hardened service

Ship a small service with a written threat model and safer defaults.

about 8 hours Portfolio piece

The brief

Take a small Node service with PostgreSQL, draw its data flow, list the top threats and harden the parts that matter: sessions, headers, secrets and the container.

DeliverableThe service, a threat model table, a security checklist and an incident contact plan.

Stretch goals

Add an audit log for authentication events.
Write a short incident response runbook.

Acceptance criteria

0/6

A data-flow diagram shows the browser, server, database and trust boundaries.
The threat table names assets, threats and mitigations.
Security headers include a Content Security Policy and frame protection.
Secrets are read from the environment and absent from the client bundle.
The container runs least-privilege and is pinned to a specific image.
A dependency audit is recorded with the response to each finding.

Path complete

Finish with proof, not just a folder of files.

Complete every course in this path to collect 5 verifiable certificates. Each one has a unique public ID and a QR code that resolves to a live status record.

How certification works Verify a credential

Security Foundations56 lessons · 12 hours

HTML FoundationsNode.js FoundationsPostgreSQL FoundationsDocker FoundationsCybersecurity Foundations

Other paths

All paths

01Most popular

Learning path

Frontend Developer

The complete starting point for a career in the browser. Build structure with HTML, shape it with CSS and make it react with JavaScript — then prove it with a certificate.

Portfolio project included

3 courses

8 weeks Certificate included

02Beginner

Learning path

Python from Zero

Learn to think in programs. Start with values and logic, build up to functions and files, and finish with an automation script that saves real time.

Portfolio project included

1 course

5 weeks Certificate included

03Beginner

Learning path

Data Foundations

Combine SQL and Python to clean, query and summarise data. Designed for analysts, operators and anyone who works with spreadsheets that have outgrown them.

Portfolio project included

2 courses

6 weeks Certificate included