This paper presents how engineering students become acquainted with the testing of web applications and integrated web systems during their education. The key components of integrated web systems are outlined. Integrated web system commonly includes multi-platform web applications with various levels of user access, a mobile application, and a REST API system for exchanging data among system components. To ensure that every student not only gains theoretical insights but also attains a comprehensive and robust practical understanding, it becomes imperative to seamlessly integrate laboratory exercises as an integral component of the daily educational curriculum. By engaging in hands-on activities within the controlled environment of a laboratory, students can actively apply theoretical concepts to real-world scenarios, fostering a deeper comprehension of the subject matter and enhancing their overall learning experience. This approach facilitates a well-rounded educational journey, allowing students to bridge the gap between theoretical knowledge and practical application, thereby preparing them more effectively for the challenges they may encounter in their academic and professional pursuits. Through real-life examples, students will be able to analyse security risks and apply appropriate mechanisms and protection techniques. In paper, most interesting tasks for testing the security of each component of integrated web system are described. Some of tools and services that are used by students at exercises are presented.