Practice finding real security vulnerabilities in code — the same skill interviewers actually test for. Click the vulnerable line or identify the vulnerability type, then see exactly why it matters.
10 real vulnerability examples pulled from actual code — SQL injection, XSS, IDOR, insecure deserialization, and more. Each one includes a full explanation and fix, just like you'd want to give in an interview.
You've got a solid handle on spotting common vulnerabilities.
No backend, no database, no accounts, and no personal data is collected or stored anywhere — this quiz runs entirely in your browser. All question content is HTML-escaped before rendering to prevent XSS, even though the source data is trusted. A Content-Security-Policy restricts this page to loading resources only from itself and Google Fonts. If you spot anything that could be hardened further, let us know — feedback on the tool itself is always welcome.