Courses modules are made up of learning resources and language-specific coding challenges that allow you to build secure coding awareness and competency right into your overall cybersecurity program.
Each Course can be created to address your organization's specific training or vulnerability requirements, allowing you to build repeatable learning pathways for development teams.
The video and article below describes the steps a Company Administrator or Team Manager can take to create and publish a course.
Open Courses from the top menu and select Course Management
Select Add Course to start the course creation wizard
The Course creation wizard will guide you through configuration, starting with selecting the focus of the course, depending upon your requirements.
You have the ability to build your Course using an existing template, or you can start from scratch.
1) Build your course using one of the existing templates
- OWASP Top 10 Awareness - Contains pre-configured templates that cover OWASP Top 10 categories including;
- A1-Injection, A2-Broken Authentication, A3-Sensitive Data Storage, A4-XML External Entities, A5-Broken Authentication Control, A6-Security Misconfiguration, A7-Cross-Site Scripting, A8-Insecure Deserialization, A9-Using Components with Known Vulnerabilities, and A10-Insufficient Logging & Monitoring.
- Train developers at least annually in up-to-date secure coding techniques, including how to avoid common coding vulnerabilities
- Develop applications based on secure coding guidelines
2) Build your Course from scratch
- Target Specific Vulnerabilities - This allows the creation of a course that addresses specific vulnerabilities. If you choose this option, the platform will set up predefined modules for listed vulnerabilities
- Custom - Build a course from scratch with full control over videos, challenges, difficulty, and hints available on the platform for the selected programming language:framework. Learn more about creating your own course modules
Once you've chosen your focus, the languages supported by the template (or all that you are licensed for when creating a custom course) will be available on the Left-hand side.
Select the desired language from the list on the left, to remove any language:frameworks that aren't required for your course click on Add/remove languages, select the language and click 'Apply changes'
Tip If the language:framework is supported in Courses, the chosen focus vulnerabilities may not be valid for the language:framework combination. Please return to the previous page and set your focus to Target Specific Vulnerabilities or Custom before trying again.
Now you can review pre-configured course modules in the center panel. At this stage, you can also add additional modules if required.
Now it's time to add the 'end of course' activity. This allows you to share either a congratulatory message with the developers once they complete the course, or share a message and lead them to complete an assessment for that course.
Choose Message if you'd like to send a few words of recognition to the developer once they complete the course, or choose Assessment if you'd like to share a message and a link to the relevant course assessment:
Example Assessment link:
- If you choose the assessment option, one must be created beforehand so it can be selected and linked. (read more about that here.)
- The assessment also needs to cover the same language(s) as the course.
What will the developers see?
Next, click the Participants tab to assign the course to individuals, teams, or the entire organization. The course will only become available to assigned participants once it's been published.
Click the Settings tab.
At this point, you should have provided a name and description for the course. Choose naming conventions that will give participants (and yourself) a quick idea of what the course will cover.
Alternatively, If you aren't ready to publish the course, you can always save your progress by clicking 'Save as Draft’ and get back to it at a later date.
Now the Course is ready to be published. Click Publish course button