en
CBO • Registration Pending Bulenga, Wakiso District, Uganda
"Where Talent Grows Together" Join Community
All Free Courses & Fields
Security • Step-by-Step Curriculum

Application & Software Security (AppSec)

Focused on developers and architects: learn threat modeling, secure auth, input/output safety, dependency scanning, and OWASP ASVS.

Track Progress 0/6 Steps (0%)
Sign in to save progress, pass the Mastery Test, and earn a verified MESHLUMA Certificate. Practice Mastery Test (5 Questions)
Practical Equipment & Study Requirements
What laptop, phone, internet, and free tools you need for this field—plus cloud options if your device is low-spec.
8GB+ Laptop (or Cloud Labs)
Laptop / PC Specs

Minimum: 4GB–8GB RAM laptop.

Recommended: 8GB–16GB RAM laptop for running OWASP Juice Shop / Semgrep locally.

Free Cloud Option: PortSwigger Web Security Academy & GitHub Actions run in browser.

Phone & Internet

Laptop Essential

Read OWASP Cheat Sheets on phone; code audits and Burp/Semgrep labs need a laptop.

Internet: 2–5 Mbps.

Free Software & Hardware Kit
Burp Suite Community Semgrep CLI Git / GitHub Actions OWASP ZAP

Hardware / Kit: None required.

Best Way to Study This Field Easily: Finish each study step and its hands-on milestone first—your Mastery Test unlocks automatically at the end to qualify for your certificate.
All Levels (1–6) Beginner Intermediate Advanced Expert
Intermediate Stage

Build real multi-part projects, tooling fluency, and problem-solving speed.

Step 3 intermediate ~12 hrs

Authentication, Sessions, Password Hashing & Access Control

Implement Argon2/bcrypt, MFA, CSRF tokens, and strict object-level authorization.

What You Will Learn
  • Argon2id/bcrypt vs broken MD5/SHA1
  • Preventing IDOR & privilege escalation
Free Public Courses & Official Docs
OWASP Authentication Cheat Sheet
Public Free Resource • Free Course / Docs
Open Free
Hands-On Milestone Project: Harden a sample app's login, password reset, and role middleware.
Step 4 intermediate ~8 hrs

Cryptography, Secrets Management & API Key Hygiene

Never hardcode secrets in Git; encrypt sensitive data properly with standard libraries.

What You Will Learn
  • TLS 1.3, AEAD (AES-GCM) & HMAC
  • .env hygiene & secret scanning
Free Public Courses & Official Docs
PortSwigger Web Security Academy
Public Free Resource • Free Course / Docs
Open Free
Hands-On Milestone Project: Remove hardcoded keys and configure pre-commit secret scanning.
Field Mastery Assessment

Application & Software Security (AppSec) — Practical Mastery Assessment

Score 80% or higher (5 scenario questions) + submit your real practical capstone project after at least 7 days of study to earn a Verified MESHLUMA Certificate.

Sign In & Complete Study Steps to Unlock Test

Tests are given after studying all 6 steps to prove real practical mastery.

Sign In to Track Study & Unlock Test
Explore Other Technology Fields
Software Development & Web Engineering Artificial Intelligence, ML & Data Science Cybersecurity & Networking Hardware, IoT & Robotics Cloud Computing, DevOps & SRE UI/UX Design & Digital Product Engineering Mobile App Development Digital Literacy, Productivity & Tech Foundations Ethical Hacking & Penetration Testing Digital & Online Marketing Sales, Business Development & Client Acquisition Kids & Teens Coding, Robotics & Digital Creativity Leadership & Personal Development Lean & Agile Methodologies HTML & CSS Mastery Git, GitHub & GitLab Workflows Python Programming Object-Oriented Development (OOP) Human-Centered Design (HCD) Lean Startup Methodologies Django & Django Templating Language (DTL) APIs & Microservices Architecture Choosing Your Tech Stack & System Architecture Project Planning, Roadmaps & Software Structuring UI Layouts, Page Grids & Responsive Design Systems Laravel & Laravel Herd Full-Stack Engineering AI Video Making with Google Flow, Gemini & Long-Form (>1 Min) Editing AI Image Generation & Logo Design (ChatGPT, Gemini & Vector Branding) AI Tools & Coding with AI Setup (Everything Before Coding & Debugging)