Hacksplaining

Hacksplaining is an interactive secure coding training platform that teaches developers to recognize and prevent common software vulnerabilities. Its lessons follow a hands-on approach: learners first exploit a real vulnerability in a simulated environment, then fix the vulnerable code. The platform covers the OWASP Top 10, including SQL injection, cross-site scripting, broken authentication, CSRF, path traversal, command injection, and broken access control, as well as GenAI-era threats such as prompt injection in LLM applications. Lessons are expert-written and take 15–30 minutes each, with examples in Python, JavaScript, Java, Go, and other languages. Quizzes after each lesson reinforce learning, and progress can be tracked across the full lesson library.

For teams, Hacksplaining adds administrative and compliance capabilities. The platform includes real-time progress dashboards showing completion rates, time spent, and quiz scores; compliance reporting with certificates for PCI DSS and ISO 27001; custom curriculum assignment tailored to a team's tech stack and threat model; SAML 2.0 single sign-on through providers such as Okta and Microsoft Entra; API access for syncing progress to LMS, HRIS, or internal tools; and self-hosting options with SCORM 1.2 and 2004 modules compatible with any LMS. The platform is free for personal use, with a free account available to track individual progress. A paid team plan is offered on a per-user annual basis, and a 14-day free trial is available without a credit card. A self-hosted edition is also available for organizations that want to run the content on their own infrastructure.