Learn cybersecurity — defensively, for the people who build and run systems.

Strive builds a foundations course in defensive security for developers and IT pros — threat models, the OWASP Top 10, network basics, identity, and security across the SDLC. Pen-testing and offensive techniques are out of scope; this course is about understanding risk and building systems that hold up to it.

What you’ll learn

• Build a basic threat model for a system — assets, actors, surfaces, mitigations.
• Recognise and defend against the OWASP Top 10 in code you actually write.
• Reason about identity — authentication vs authorization, sessions, tokens, MFA.
• Read a network diagram — subnets, firewalls, TLS, and what each layer does.
• Handle secrets and credentials without leaking them into repos, logs, or images.
• Embed security checks into a CI pipeline — dependency scanning, SAST, code review prompts.
• Respond to an incident with the right first three steps, not the dramatic ones.

A typical Strive course on Cybersecurity foundations

1. How to think about security — assets, threats, mitigations3 lessons
2. The OWASP Top 10 — the bugs that keep showing up5 lessons
3. Identity — auth, sessions, tokens, MFA4 lessons
4. Networks for non-network-engineers4 lessons
5. Secrets, credentials, and the supply chain3 lessons
6. Security in the SDLC — code review, scanning, CI4 lessons
7. When something goes wrong — incident response basics3 lessons

Demonstration outline — your course is generated around your answers, so module count, depth, and difficulty will differ from this. Across the 7 modules above there are 26 lessons.

Frequently asked