Skip to main content

Sign in

Continue where you left off.

Email

PasswordForgot password?

No account? Create one

What you get

26 practical labs across 3 learning paths, mapped to OWASP Top 10:2025 and CWE.

SCD-01Fix SQL injection in a user lookup~20 min
CRV-01Review a pull request: customer API~25 min
INV-01Investigate a credential-stuffing breach~30 min
SCD-02Encode output to stop stored XSS~20 min

Fix vulnerable code until the security tests pass, review pull requests line by line, and investigate incidents in a terminal.

AppSec Arena

Hands-on application security labs for engineers.

Labs

All labs
Learning paths

Library

Vulnerability guide
OWASP Top 10
Resources
Roadmaps

Community

Discussions
Teams

Company

About
Contact
Privacy
Terms
Cookies

© 2026 AppSec Arena