NexurAI
NexurAI is where you get graded; these are the best free (and a few paid) places to build breadth alongside it. 17hand-picked resources, each paired with the NexurAI track it pairs best with. We link to these public sites - we don't host or copy their content.
Get the lay of the land and the vocabulary before you go deep.
Career paths, role breakdowns and how the field fits together.
Pairs with: Find your pathThe open standards behind app security - Top 10, ASVS, cheat sheets.
Pairs with: AppSec trackThe most in-demand skill set - practice the OWASP Top 10 and API Top 10.
The gold-standard free labs for every web vulnerability class.
Pairs with: Turn attacks into detectionsThe current API risk taxonomy - BOLA, mass assignment, and friends.
Pairs with: Write API detectionsNothing replaces reps. Break things in safe, legal environments.
Realistic attack boxes and pro labs once you're ready to level up.
Pairs with: Cyber ArenaThe game-changer under every attack and detection - know how packets move.
Free structured networking courses (incl. CCNA-aligned material).
Pairs with: Network forensics labsOnce the basics are solid, go deep on one lane.
Bug-bounty methodology and recon-to-report workflow.
Pairs with: Detection Engineer trackA huge directory of DFIR tools, challenges and reference material.
Pairs with: Work a SOAR caseThe frontier - defending models, agents and the pipelines around them.
The ATT&CK-style knowledge base for adversarial ML / AI attacks.
Pairs with: AI Security trackThe canonical risk list for LLM and generative-AI applications.
Pairs with: AI detectionsSuggestions welcome. External links are provided for education; NexurAI is not affiliated with these sites and is not responsible for their content.