COURSES

Top curated bug bounty and offensive security learning paths.

Offensive Security – SEC-100 (OSCC)

Intro cyber training across offense & defense; certification: OSCC.

Explore SEC-100

PortSwigger Web Security Academy

Free interactive labs covering OWASP Top 10 and advanced vulnerabilities.

Visit Academy

Hacker101 (HackerOne)

Free video series & CTF challenges for real-world bug hunting.

Go to Hacker101

TCM Practical Bug Bounty (Intigriti)

Paid hands-on attack simulations + WAF bypass training.

Explore Course

HTB Certified Bug Bounty Hunter (CBBH)

Hands-on bug bounty certification from Hack The Box.

Learn More

Class Central Guide

2025 roundup of bug bounty courses—free & paid on YouTube, Udemy & more.

Read Guide