OWASP Foundation Courses

Changed Responsibilities in Modern Development Practices

Explore how modern development practices like CI/CD and DevOps impact application security. Learn strategies for integrating security early in the development lifecycle and empowering developers with essential security skills.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Analyzing Google's SLSA Framework for Securing Software Supply Chains

Explore Google's SLSA framework for securing software supply chains, covering key areas, controls, and additional considerations beyond the framework's scope.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

OWASP ZAP: Introduction to Web Application Security Testing

Explore OWASP ZAP's latest features, including automation, reporting, and out-of-band testing. Learn how this open-source tool enhances web application security through practical demonstrations and updates.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

OWASP Software Assurance Maturity Model - SAMM

Explore OWASP's Software Assurance Maturity Model (SAMM), a framework for improving software security practices across organizations, presented by expert Bart De Win.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

OWASP Web Security Testing Guide

Comprehensive guide for web security testing, covering methodologies and best practices to identify vulnerabilities and enhance application security.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

OWASP Top 10 - Introduction to Web Application Security Risks

Comprehensive overview of OWASP Top 10, exploring critical web application security risks and effective mitigation strategies for developers and security professionals.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Application Security Verification Standard - OWASP Flagship Project

Comprehensive guide to OWASP's Application Security Verification Standard, covering its history, development, and implementation strategies for robust application security.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

OWASP Top 10 - The Making of the OWASP Top 10 and Beyond

Explore the creation process and principles behind the OWASP Top 10, a crucial resource for web application security, including data analysis, likelihood management, and scoring methodologies.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

OWASP CycloneDX - Software Bill of Materials Standard

Explore OWASP CycloneDX, a lightweight software bill of materials (SBOM) standard, with experts Steve Springett and Patrick Dwyer. Learn about its features, applications, and importance in modern software development.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

OWASP Dependency Track - Software Composition Analysis and Vulnerability Management

Explore OWASP Dependency Track: manage software components, analyze vulnerabilities, and enhance security with features like Software Bill of Materials, policy engine, and dependency graphs.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

OWASP Security Shepherd - Introduction and Overview

Learn to identify and mitigate web application vulnerabilities with OWASP Security Shepherd, an interactive platform for hands-on cybersecurity training and skill development.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

OWASP CSRFGuard: Understanding and Preventing Cross-Site Request Forgery

Learn to prevent Cross-Site Request Forgery attacks with OWASP CSRFGuard. Explore real-world examples, detection techniques, and implementation strategies for robust web application security.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Stop the Looters: Method to Detect Digital Skimming Attacks

Discover a method to detect and prevent digital skimming attacks on websites, protecting sensitive customer data from theft by malicious actors like Magecart.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

OWASP Application Gateway: Introduction and Usage for Secure Web Applications

Explore OWASP Application Gateway: a modern HTTP reverse proxy for secure web apps. Learn its benefits, implementation, and customization for enhanced application security.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Connecting the Dots: How Threat Intelligence Protects Applications

Explore Cyber Threat Intelligence integration in AppSec programs, automating data collection, and leveraging IoCs and TTPs to prevent and mitigate cyber attacks in today's digital business landscape.

• YouTube
• 27 minutes
• Self-Paced
• Free Video