Stay curious.
Keep getting better.
References, learning paths, and practical starting points
for more thoughtful security research.
Web Security Academy
Hands-on web security labs, from the fundamentals to more advanced techniques.
Explore resourceMethodologyOWASP Testing Guide
A structured reference for planning and performing application security tests.
Explore resourceReferenceCWE weakness catalog
A common vocabulary for describing software and hardware weaknesses.
Explore resourcePlatform guideWrite a useful report
Write clear steps, evidence, and demonstrated impact in your report.
Explore resourcePlatform guideResponsible disclosure
Understand the boundaries and collaboration that help a good discovery become a fix.
Explore resourcePlatform guideLaunch your first program
Explore scope, program visibility, researcher access, and report management.
Explore resourceLearn in labs. Test with permission. Always follow the program’s scope and policy.