Security training for developers

Make fixing CVEs
a daily habit.

GroundWork is a terminal-based training platform where you fix real CVEs (Common Vulnerabilities and Exposures) in a realistic terminal environment.

Install Groundwork View on GitHub
groundwork⌘ K
groundwork / choose your stack
Select a language to debug a real CVE:
› 1. Python django · flask · fastapi
› 2. JavaScript express · axios · lodash
› 3. Java log4j-core · spring-core
› 4. C/C++ curl · libpng · ffmpeg
↑/k move up　·　↓/j move down　·　enter pick
Inside the terminal

Groundwork TUI

Designed in Go with Bubble Tea.

Groundwork TUI showing a real CVE ticket and vulnerable Python code
The loop

Learn the shape
of the problem.

Every session drops you into a realistic security ticket. You read it, patch it, and get a senior engineer’s review.

01

Pick a language

Choose Python, JavaScript, Java, or C++ and pull a scenario from that ecosystem.

02

Get a real ticket

Work from a Jira-style ticket built around an actual advisory from OSV.dev.

03

Ship the fix

Edit the vulnerable code in your terminal, then let AI review the reasoning behind your patch.

Get started

Install the TUI
in one command.

Install the binary, open your terminal, and start with your first vulnerability. Works on macOS, Linux, and Windows.

Browse all releases
install Groundwork ready
Linux / macOS
$curl -fsSL https://raw.githubusercontent.com/Kanishkp2906/groundwork-cli/main/install.sh | bash
Windows · PowerShell
$iwr -useb https://raw.githubusercontent.com/Kanishkp2906/groundwork-cli/main/install.ps1 | iex

Prefer to install manually? Download the latest binary from Releases.