Learn web security on a fictional bank.

Practise discovering, documenting, and remediating OWASP Top 10 vulnerabilities inside a contained training environment. Every account, transaction, and ticket is fake.

Start training Read the disclaimer

Feature

Guided pentest

Step-by-step scenarios for IDOR, XSS, injection, broken access, and more.

Feature

Simulated scanner

Inspects only the lab. Reports severity, evidence, and OWASP mapping.

Feature

Report generator

Produce a professional pentest report from your findings in one click.