Defence Lab

Security Champions

Interactive training for developers who defend the code

Making the Security Champion

1 part · Role & mindset

1 part · Dev lifecycle

03

OWASP Top 10

5 lenses · Vulnerability deep-dive

▾

Lens 1 — Overview & categories Lens 2 — What changed and why Lens 3 — Architecture against you Lens 4 — Someone else's code Lens 5 — We can't predict everything

04

Threat Modeling

2 parts · STRIDE & practice

▾

Part A — Concepts & Methods Part B — Case Study & Practice

05

Supply Chain Security

2 parts · SCA, SBOM, SLSA

▾

Part A — Attack Surfaces Part B — Hardening & SLSA

06

Secret Management

2 parts · Vaults & cloud

▾

Part A — Fundamentals Part B — Cloud Solutions

07

Security Config & Access Control

2 parts · Hardening & RBAC

▾

Part A — Security Configuration Part B — Access Control & Policy

08

Incident Response

2 parts · IR lifecycle

▾

Part A — IR Fundamentals Part B — Operationalizing IR

09

Mobile Application Security

2 parts · MASVS & pitfalls

▾

Part A — Mobile Security Fundamentals Part B — MASVS & Developer Pitfalls

Champ's Challenge Bank

27 exercises · AI-graded practice

Chat · Ask anything about the course