Hacksplaining
Verified working Aug 19, 2026
Interactive secure-coding lessons built around exploiting real bugs.
Hacksplaining is a web-based training site for learning how software vulnerabilities work and how to prevent them in code. Its lessons have learners first trigger or abuse an attack, then review safer implementation patterns across languages such as Python, JavaScript, Java, and Go. Personal learning is free, while team training adds management and reporting features.
Why it stands out
- Combines offensive practice with defensive code patterns instead of presenting security as passive reading.
- Includes newer AI-era topics such as prompt injection alongside classic web vulnerabilities.
- Lessons are designed to fit into 15–30 minute sessions, making them easier to use during a workday.
- Examples span several mainstream languages, helping developers map concepts to their own stack.
- Team plan focuses on training evidence with dashboards and compliance reports, not just course access.
Good to know
- Free access is for personal use; team dashboards, SSO, progress oversight, and compliance reports are paid.
- Learners are expected to understand basic coding concepts, so it is not a first programming course.
- The curriculum centers on application security and secure coding, not the full breadth of cybersecurity operations.
Photos

Application developers and engineering teams can practice secure coding against common web and AI-related vulnerabilities. Review OWASP Top 10 issues before starting a security-focused sprint or code review. Learn the mechanics of SQL injection, XSS, CSRF, prompt injection, and similar attacks in short sessions. Use quizzes and progress tracking to reinforce security concepts over time. Train a team with dashboards, SSO, and compliance-oriented reporting.
45+ interactive lessons; attack-and-fix learning flow; OWASP Top 10 and emerging AI vulnerability coverage; code examples in multiple programming languages; short quizzes; personal progress tracking; paid team dashboards, SSO, and reporting.
Alternative listings
Interactive STEM lessons that teach through guided problem solving.
Open educational resources & free learning platformsBrilliant is an online learning platform for math, computer science, science, data analysis, and AI topics. It emphasizes visual, step-by-step problem solving, with an AI tutor named Koji that adjusts practice based on what a learner has mastered or is struggling with.
0 votesVisit siteA large free course catalog for career skills, certificates, and diplomas.
Open educational resources & free learning platformsAlison is an online learning platform with thousands of courses across business, IT, health, languages, teaching, management, and other career-oriented areas. It combines self-paced courses with certificates and diplomas, career exploration tools, psychometric assessments, a résumé builder, and a mobile app with offline learning support.
0 votesVisit site
Similar sites elsewhere
- PortSwigger Web Security Academy — portswigger.net/web-security
- PentesterLab — pentesterlab.com
- Secure Code Warrior — securecodewarrior.com
- OWASP WebGoat — owasp.org/www-project-webgoat/
1 of 4