knowledge base · software security
Security, mapped to learn.
Each domain is a learning map: topics by level, prerequisites, a guided next step, glossary and quizzes. 11 ready maps, all at the same level of depth.
- domains
- 11
- live
- 11
- draft
- 00
your progress
0/106 topics studied
AppSec0/9
CloudSec0/11
Agents0/15
SecOps0/10
Engineering0/8
OWASP Top 100/10
Vibecoding0/9
DevOps0/10
Incident response0/8
Offensive security0/8
GRC and leadership0/8
saved only in this browser
appsec9 topics · 20 min read
AppSec
SAST, DAST, SCA, secrets, SBOM and the pipeline: the interactive map that shows each check and where it enters the delivery flow.
open map
cloudsec11 topics · 43 min read
CloudSec
Cloud posture, IAM, segmentation and supply chain: its own graph, in the same style as AppSec.
open map
ai-agents15 topics · 54 min read
Agents
Security for agents and AI workloads: RAG, tool calling, MCP, guardrails. A complete map.
open map
secops10 topics · 21 min read
SecOps
L7 edge defense in practice: WAF, rate limiting, bots, detection and SLOs, from log to block, and the metric that proves it works.
open map
seceng8 topics · 17 min read
Engineering
Building the security platform: IaC and policy as code, hardened CI/CD, reliability at scale, automation and AI with their feet on the ground.
open map
owasp10 topics · 24 min read
OWASP Top 10
The ten risks that matter most in web applications: what they are, how they are attacked, the code that fails, the code that holds, and how to verify it.
open map
vibecoding9 topics · 26 min read
Vibecoding
AI-assisted coding without the hype: the layers (model, harness, provider), the tools compared, context engineering, parallel agents, verification and agent security.
open map
devops10 topics · 20 min read
DevOps
From commit to production and back: the delivery loop, how to build it fast and safe, and how to keep it healthy once it runs.
open map
response8 topics · 16 min read
Incident response
The defender's side of an attack: a rehearsed response, hunts that become detections, careful containment, and evidence that stands up.
open map
offsec8 topics · 17 min read
Offensive security
Think like an attacker to defend better: authorized testing, repeatable method, honest reports and detection that improves after every exercise.
open map
grc8 topics · 16 min read
GRC and leadership
How security is run as a business function: decisions on risk, controls that can be proven, numbers that matter and leadership that people trust.
open map
ways to explore
Guided journey
A map that teaches from the basics to advanced, unlocking as you learn.
Careers
Roadmaps for AppSec, DevSecOps, DevOps and more: what the work is and how to get there.
Study paths
A thoughtful order for each goal, with progress saved in your browser.
Follow the attack
Follow an incident step by step and discover which control stops each move.