Designed ITGC eLearning to help employees recognize control risks, understand responsibilities, and apply compliance practices in real-world scenarios.
New course site for NUDDA, a martial-arts school, live at nudda.com since 1 October 2026.
I built it from scratch on LearnDash. You buy the course without creating an account first: one consent box, then a card payment through Stripe.
The step I was most careful with was the switch to the live domain. I swapped folders, so the old site and its database stayed untouched next to the new one as the way back, and a script then ran 14 checks from outside and passed all 14. Six people who had bought on the old site came over with their existing passwords, so nobody got a reset email.
PageSpeed Insights on 28 October: Performance 97 on mobile and 100 on desktop, plus 100 for accessibility, best practices and SEO.
Keeping the existing learners’ passwords working is a thoughtful migration detail; the course should feel continuous to them even when the platform changes. For the account-after-payment flow, how do you handle a buyer who uses the same email as an existing learner, so their new purchase lands in the right account?
AI can help security professionals reduce repetitive work, organize evidence, and accelerate reporting. However, human validation remains essential for confirming findings, understanding business impact, and avoiding false positives.
This project uses a fictional application and simulated security findings. No real systems or data were involved.
💬 Where do you think AI can provide the most value in penetration testing: discovery, validation, or reporting?