Recommended Services
Tuta Mail
End-to-end encrypted email, calendar, and contacts, hosted in Germany. Mailbox contents, subject lines, and the address book are encrypted at rest — Tuta cannot read them, which also means there is no server-side content scanning to opt out of.
A usable answer to “where do I put the mailbox I do not want mined?” — a burner-grade address for vendor sign-ups and bug bounty contact, or a personal mailbox under EU jurisdiction. The free tier is enough to test it properly before paying, and the clients are open source.
PentesterLab
Browser-based exercises built on real vulnerability classes — web attacks, authentication and JWT flaws, deserialisation, API issues, and source-code review. Each exercise ships a vulnerable target and a walkthrough, and completed tracks roll up into badges you can point at.
It closes the gap between reading about a CVE class and actually exploiting one. If you use the decoders and analysers on this site and want to understand why the broken thing is broken, this is the practice ground — and the badge tracks map cleanly onto what interviewers ask about. A set of exercises is free, so you can judge the teaching style before subscribing.