Security Lab
Defensive security work in a sandbox: threat-model checklists, password policies as tested code and sign-in log triage, plus case studies where you patch a deliberately vulnerable Mangrove mini-app and prove the attack stops working. Everything runs locally against fake data.