Students and developers new to security who want a practical, ethical start.
Think Like an Attacker, Defend Like an Engineer
Learn the core ideas of security, find and fix the most common web vulnerabilities in a safe practice application, and write a real security report.
- 40hours of work
- 19parts
- Checkedcapstone
- Lifetimeaccess
- Threat modelling
- OWASP Top 10
- Authentication
- Network security
- Secure habits
- Security reporting
At a glance
A laptop with Docker installed to run a practice application, and a browser. Some familiarity with how websites work helps. You must only test systems you own or have written permission to test; the programme explains why.
Pass the quizzes, complete the labs and submit your capstone. Everything is checked as you go and your certificate is issued the moment you finish.
What you will be able to do
- 01Explain confidentiality, integrity and availability and build a simple threat model
- 02Recognise and exploit, in a safe lab, then fix cross-site scripting, SQL injection and broken access control
- 03Explain how passwords, multi-factor authentication and phishing really work
- 04Describe how TLS protects traffic and what basic network defences do
- 05Write a clear security report with evidence, impact and fixes
Curriculum 40 hours in 19 parts
Select a kind to highlight its parts.
Stage 1Find and fix vulnerabilities in a safe app7 parts · 11 h
- 1How attacks work and how to think about securityLesson · Short, focused reading with questions to check yourself.1 hFree
- 2The most common web vulnerabilitiesLesson · Short, focused reading with questions to check yourself.1 h
- 3XSS and injection, attack then defendWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 4Passwords, authentication and phishingLesson · Short, focused reading with questions to check yourself.1 h
- 5Broken access control and weak authenticationWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 6Check yourself: security foundationsQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 7Find and fix vulnerabilities in a safe appLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 2Harden a small app and a server6 parts · 10 h
- 8Networks, TLS and basic defencesLesson · Short, focused reading with questions to check yourself.1 h
- 9See and secure network trafficWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 10Secure habits and responding to incidentsLesson · Short, focused reading with questions to check yourself.1 h
- 11Secure coding, secrets and dependenciesWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 12Check yourself: networks and secure habitsQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 13Harden a small app and a serverLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 3Secure a server and its application end to end4 parts · 8 h
- 14Investigate and respond to an incidentWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 15Security tools and writing a good findingWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 16Check yourself: security in practiceQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 17Secure a server and its application end to endLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 4A threat model and a privacy review1 part · 3 h
- 18A threat model and a privacy reviewLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
FinishCapstone project1 part · 8 h
- 19A professional security reportCapstone · A full project for your portfolio.8 h
An internship certificate with your skills on it.
Made for you automatically when you finish the last part, it names the internship programme, the level and the 40 hours, lists what you showed, and carries a number and a QR code. Anyone can check it on the NIBVEDA verification page, and it shows as withdrawn there if it is ever revoked.
- Proof you completed all 40 hours of this internship programme
- An Internship badge for your profile, CV or portfolio
- Not a job, a stipend or an academic degree, and it says so
Keep building.
3 programmes in this track, from beginner to expert. Buy the learning path and save 15%.
Move from knowing the vulnerabilities to working with them: map the attack surface of a practice target, exploit and fix deeper web flaws, use cryptography correctly, harden systems, and write detections that catch real attacks, finishing with a security assessment reviewed by the NIBVEDA team.
- Reconnaissance
- Web penetration testing
- Cryptography in practice
Think like the owner of a security programme: model threats at scale with ATT&CK, design identity and architecture that resist attack, investigate incidents with forensic evidence, run vulnerability and testing programmes, and govern risk, finishing with a security programme for an organisation reviewed by the NIBVEDA team.
- Threat modelling
- Security architecture
- Digital forensics
See all 3 programmes in Cybersecurity Take the placement test
Quick answers.
The policies have the full detail.
Is this a real internship?
It is a virtual internship programme: a structured, self-paced course built around a real project, with checked assessments and a certificate. It is not employment, it does not carry a stipend and it is not an academic or AICTE-approved qualification. What it gives you is verified, project-based evidence of skills.
How does self-paced work?
You start when you like and move at your own speed. Each part unlocks when you finish the one before it. There are no live classes and no deadlines. Your access is shown on each programme page.
How is my work checked?
Quizzes are marked as soon as you submit them. Labs use a tick-list of tasks. Intermediate and Expert programmes finish with a capstone that the NIBVEDA team reviews and either accepts or sends back with comments.
Can I get a refund?
Please read the refund policy before you buy. It explains when a refund is possible.
Ready to start?
Rs. 352.82 including GST. Lifetime access. Read the first lesson free before you decide.