Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.

Additional Resources For Securing The Stack Tutorials

Web Application Pentesting Lab with over 40 plus vulnerability, which covers all the owasp top 10 issues.

A client-side web security tool that sanitizes potentially malicious HTML and JavaScript input by stripping unsafe tags and event attributes. Designed to demonstrate XSS prevention concepts, safe input handling, and frontend security practices using pure HTML, CSS, and JavaScript in a beginner-friendly interface.

This extension helps bug bounty hunters and recon specialists quickly search for archived URLs of any domain using the Wayback Machine. One click, instant access to historical data that might expose forgotten paths, juicy parameters, or legacy vulnerabilities.

SafeMarkdown — Editor with XSS Protection. A web application that accepts Markdown markup, parses it, and renders it safely.

⚡ An AI-enhanced code analysis platform — detects and auto-fixes Security, Performance, Quality, Syntax & Logic issues across JavaScript, TypeScript, Python, Java, and SQL using 26+ rules. Supabase backend · OpenAI GPT insights · Docker-ready · Sub-2s results.

JS Project Secrets Management and Isolation

WebAudit is a lightweight Chrome/Edge extension that performs real-time structural, security, and developer analysis of any webpage, presenting clear scores with actionable insights.

🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.

Lotide is a mini-clone of the Lodash library, created to understand how utility libraries work under the hood. This project demonstrates fundamental JavaScript programming, test-driven development, algorithm implementation, and npm package publishing. It showcases secure coding practices through input validation, type safety, and more.

Tour booking website

A browser extension that detects common web vulnerabilities and explains them using AI. Powered by GROQ and backed by a secure Node.js proxy.

Work in progress: A UI project for generating secure passwords as part of the learn javascript path from Scrimba

A RESTful API built using Express.js and LDAP.js for managing user authentication and directory services.

A CLI tool that processes @pre, @post, and @invariant tags in functions, classes, and methods within a source file. It generates a modified version of the source code that automatically validates input conditions (@pre), result conditions (@post), and invariant conditions (@invariant).

"Chat application Works in Real time - Build Using MERN Stack"

A comprehensive, enterprise-grade secure file upload web application built following OWASP best practices for secure coding, file management, and application security verification standards. Features a modern web interface with user authentication, admin panel, and robust security controls.

Quiz for IT team to stay up-to-date with OWASP top 10.

Full-stack web security lab demonstrating vulnerable and secure implementations of common attacks (SQLi, XSS, CSRF, and access control) with a runtime toggle for side-by-side comparison.