AppSec Training

An overview of free as well as commercial training and certifications related to secure software development in no particular order.

Org/Platform	Course/Cert	Cost	Certificate?
PortSwigger	Burp Suite Certified Practitioner	✨free	✅ (€89)
WeHackPurple	Application Security Foundations Level 1-3	✨free	❌
	+ more like Secure Coding, API Security...	✨free	❌
Practical DevSecOps	Certified DevSecOps Professional (CDP)	$899	✅ (included)
	Certified DevSecOps Expert (CDE)	$1199	✅ (included)
	Certified DevSecOps Leader (CDL)	$899	✅ (included)
	+ more like API Security, Threat Modeling...	varies	✅ (included)
(ISC)²	Certified Secure Software Lifecycle Professional (CSSLP)	varies	✅ ($599)
The Linux Foundation	Developing Secure Software (LFD121)	✨free	✅
Kontra	Application Security Training and Software Security Education	🤷	🤷
Secure Code Warrior	Secure code learning for today’s developers	🤷	🤷
SafeStack	Security Fundamentals for Software Development	✨free	✅ (✨free)
	Introduction to DevSecOps	🤷	✅
	+ more like Mobile, Microservices, Zero Trust...	from $25/mo.	✅ (included)
SANS	SEC540: Cloud Security and DevSecOps Automation	$8,275	✅ $949
DevOps Institute	DevSecOps FoundationSM	varies	✅ ($270)
SecureFlag	Labs-based AppSec education platform	🤷	🤷
Security Journey	Labs-based AppSec education platform	🤷	🤷 (5 levels)
	DevSecOps PractitionerSM	varies	✅ ($270)
SECO	Certified Secure Programming Foundation (S-CSPF)	varies	✅ (included)
Everable	Various courses (CI/CD, SAST, DAST, IaC...)	🤷	❌

Other Resources

Books

• Hsu, T. (2018) Hands-on security in DevOps. Birmingham, UK: Packt Publishing.
• Janca, T. (2021) Alice & Bob Learn Application Security. Indianapolis, IN: John Wiley & Sons, Inc.