OWASP Foundation Courses

Purple Teaming with OWASP PurpleTeam

Explore OWASP PurpleTeam: a security regression testing tool for web apps and APIs. Learn its journey, architecture, benefits, setup, and various workflows for effective implementation in build pipelines.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

OWASP ZAP and DeepFactor - Continuous AppSec Observability for DevSecOps

Explore how DeepFactor's observability enhances OWASP ZAP for comprehensive DevSecOps, detecting security risks in modern cloud-native applications through advanced event monitoring.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Are You Safe from OWASP #11? - Creating a Successful API Security Program

Explore API security beyond Top 10 lists, focusing on building a comprehensive program at scale. Learn key strategies for successful API protection and management.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Why Checking Infrastructure-as-Code for Misconfigurations Is Not Enough - Comprehensive Cloud-Native Application Security

Explore comprehensive cloud-native app security beyond misconfigurations. Learn dynamic assessment techniques for robust architecture design and compliance in modern software development.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

25 Years in AppSec: Looking Back and Forward

Adam Shostack reflects on 25 years in AppSec, discussing progress, challenges, and future trends. He explores AI's impact, evolving security landscapes, and the importance of trust and learning systems.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Why Security Fails and How to Solve It - Lessons from Real-World Assessments

Explore real-world security failures and innovative solutions with insights from Praetorian's field experiences. Learn actionable steps to enhance cybersecurity through smarter practices and cutting-edge tools.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

SecDevOps - Integrating Security into Development and Operations

Explore SecDevOps: integrating security into CI/CD pipelines, securing development environments, and implementing security as code for robust cybersecurity from the start.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Scaling Security through Context-Based Security Assessments

Streamlining security assessments through context-based automation, enabling efficient scaling and tailored workflows for product security teams in rapidly growing organizations.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

SBOM SmackDown - Conquering Software Supply Chain Risks with OWASP CycloneDX

Explore Software Bill of Materials (SBOM) and learn how OWASP CycloneDX standard enhances software supply chain transparency, enabling better risk-based decisions and compliance with government mandates.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Automated Serverless Security Testing: Delivering Secure Apps Continuously

Explore serverless security risks, traditional testing limitations, and a new automated approach for secure serverless development without scripts or delays.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Practical Threat Modeling for Real-World and Cloud Situations in Hybrid Work Environments

Practical guide to threat modeling for cloud and hybrid work environments, covering creation, identification, addressing, and validation of threats with real-world examples and tools.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Leave It to the Machines - AI and ML in Container Security

Explore how AI and ML empower security teams to proactively secure container-based applications, shifting left security capabilities and streamlining the development process.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Understanding the API Attack Vector - How Attackers Exploit Application Communications

Explore attacker techniques for targeting API-driven applications, including code manipulation, mobile vulnerabilities, and advanced attacks. Learn strategies to secure apps in cloud-native environments.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Demystifying the Digital Pandemic - Understanding Infomania and Misinformation

Explore the rise of infomania, misinformation spread, and social engineering in the digital age. Learn about information disorders and develop good information hygiene practices to combat the digital pandemic.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Normalizing AppSec Issues for Contextual Risk-Based Prioritization at Enterprise Scale

Explore a new approach to Application Security that focuses on critical risks by incorporating contextual intelligence, improving efficiency and delivery in enterprise-scale programs.

• YouTube
• 18 minutes
• Self-Paced
• Free Video