Training Catalogue / Security and Threat Modelling
Secure Coding
Delivered by a CEH-certified instructor
Modules
Take single modules or the whole track. Two hour sessions, combined into half days where it suits your calendar.
Secure Code Patterns
Immutable data, input validation and injection prevention as everyday habits.
- Immutable data and avoiding shared mutable state
- Input validation and escaping
- Preventing SQL and NoSQL injection
- Safe failure handling
Secure Architectural Patterns
Secrets management, least privilege and zero trust as design defaults.
- Keeping PII out of logs and safe secrets management
- Circuit breakers, retries and least privilege
- Zero trust and CSRF protection
- Avoiding information-leaking defaults
Testing Your Security Design
Prove your defences hold with SAST, DAST and policy as code.
- Boundary, input and exploratory testing
- Automated security testing: SAST and DAST
- Pipeline security policy as code
- The value of penetration testing
Teams Often Pair This With
Related modules other teams add alongside this track.
Security and Threat Modelling · Threat Modelling Core
STRIDE and Data Flow Diagrams
Map attack surfaces with data flow diagrams and categorise threats with STRIDE.
View module Security and Threat Modelling · Offensive Security for DefendersThe Attacker Mindset and Recon
See your system the way an attacker does, starting with reconnaissance.
View moduleEnquire About This Training Open the form. We will propose a plan within 24 hours.
The subject is filled in for you. Choosing Enquire on a module above sets it to that module. Add more than one if you like.