A clear starting point
Supplied apps, exact setup steps, screenshots and worksheets. Beginner lessons explain the HTML, JavaScript and terminal steps students need.
Try the browser-security lesson →Free & open-source security education
Teach security.
Make it hands-on.
Real code. Small applications. Clear lessons.
Help students find a weakness, understand it, and prove their repair works.
07 ready-to-teach lessons19 student-kit variantsMIT use & adapt freely
A lesson, not just a command
The student journey
- 01Explore a working app
Start with supplied code, not a blank file.
- 02Understand the weakness
Observe what happens and explain why.
- 03Repair and verify
Make a focused change. Test the result.
Security claims backed by evidence
Built around CVE Lite. Built for learning.
Meet CVE Lite CVE Lite CLI is an OWASP open-source dependency scanner. Classroom combines dependency-security labs with guided application-security lessons.
Less preparation. More discovery.
A complete lesson, ready to make your own.
No need to build a vulnerable app or write a grading rubric from scratch.
The teaching materials, too
Learning objectives, lesson plans, walkthroughs, grading rubrics and worked solutions. Choose one lesson or build a sequence.
Plan your class →Flexible by design
Student-only kits for your LMS. Five package-manager tracks for dependency labs. MIT-licensed materials you can adapt to your course.
Browse student kits →From dependencies to application security
Small exercises. Important ideas.
Dependency vulnerabilitiesAI-assisted remediationCI security gatesCross-site scriptingAccess controlSafe configurationPassword storage
Seven exercises are available today. Five more are planned toward examples across the OWASP Top 10.
See every exercise →Connected to real development
Teach with a tool used beyond the classroom.
CVE Lite CLI has documented integrations in open-source and public-service projects.
SolidJS Framework security workflow ↗
Government of BC Public-service repository ↗
Valibot Open-source security workflow ↗
Réfugiés.info French public-service project ↗
In academic teachingAt Polytechnic of Leiria, Portugal, Ricardo Gomes uses CVE Lite CLI in lab work for the Master's course in Software Quality.
Explore documented CVE Lite use →Your next security lab starts here.
Choose an exercise. Download the supplied application. Teach by doing.