Cybersecurity · Intermediate · 24 live learning hours

Certificate of completion

Learners who meet the course participation and practical assessment requirements receive a Solid Elf certificate of completion.

What you will learn

Scope an authorised assessment and define boundaries
Recognise access control, input handling and configuration weaknesses
Document findings and prioritise remediation

Course outline

Week 1: Assessment scope, ethics and threat modelling
Week 2: Identity, access control and session risks
Week 3: Input handling, configuration and dependency review
Week 4: Evidence, reporting, hardening and retesting
Week 5: Dependency and configuration review in an authorised lab
Week 6: Remediation report, retesting and practical assessment

Practical project

A scoped application review and prioritised remediation report using an authorised lab.

Before you start

Basic understanding of web applications, HTTP and programming concepts.

Learning format

Fully online and live. 6 weeks · 12 sessions · 2 hours per session, twice each week. Cohort dates and the two weekly meeting days are agreed during enrolment. Allow an additional 1–2 hours of independent practice each week.

Exercises should use synthetic, de-identified or otherwise authorised material. Do not bring confidential client records or live credentials into a training session.

What the fee includes

Live tuition, guided exercises, reusable templates and feedback on your practical assignment. Software licences and internet access are not included. The published fee is per learner; any applicable tax and payment instructions are stated in writing before you pay. Certificate of completion is provided to learners who meet the course participation and assessment requirements.

Software and reference material

Explore official reference material ↗. Training is independently offered by Solid Elf; no software-vendor accreditation or certification is claimed unless explicitly stated.

Application Security Assessment Fundamentals