OWASP Foundation Courses

Lessons From DevOps - Taking DevOps Practices Into Your AppSec Life

Explore DevOps practices for enhancing application security, including workflow optimization, improved feedback loops, and automation techniques to streamline AppSec processes.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Securing the Internet of Things

Explore IoT security challenges and solutions, covering smart devices, common verticals, technologies, and key vulnerabilities in this comprehensive talk on securing the Internet of Things.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Building an AppSec Pipeline - Keeping Your Program, and Your Life, Sane

Learn to build an efficient AppSec pipeline to streamline your security program, improve workflow, and enhance overall productivity in application security management.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Scaling Security in Agile Scrum

Learn strategies for integrating security into Agile Scrum development, optimizing interactions between security and engineering teams, and fostering in-house security expertise for efficient monthly releases.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers

Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Cloud Security at Scale and What it Means for Your Application

Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

AutoScaling Web Application Security in the Cloud

Explore auto-scaling web application security in cloud environments, focusing on practical examples using AWS. Learn techniques, tools, and strategies for effective security implementation in rapidly scaling applications.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Application Security Playbook for Business

Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Flipping the Script on Application Security

Learn about GitHub's developer-first approach to application security, addressing common DevSecOps challenges and exploring innovative solutions like credential scanning and static analysis.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Temporal - Decoded - Leverage Cybersecurity as a Business Enabler

Discover how to transform cybersecurity from a cost center to a business enabler through strategic auditing, stakeholder engagement, and operational integration.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Struts 2 Must Die - The Life and Inevitable Death of Java’s Spaghettiest Framework

Explore Struts 2's evolution from modern framework to security liability. Dive into OGNL vulnerabilities, architectural flaws, and exploit techniques. Learn why Struts 2 persists in production and its potential for massive damage.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Testing Security the Right Way

Integrating QA into security testing: strategies for comprehensive SDLC security, including examples and templates for immediate implementation in development projects.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Pentesting Swift Application with OWASP iGoat

Learn iOS Swift app pentesting using OWASP iGoat, covering security loopholes, defense strategies, and real-world case studies. Gain skills for product security engineers and bug bounty hunters.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Knowing Is Half the Battle

Explore key legal and technical aspects of application security, addressing critical issues and lessons learned in this informative talk by Gregory Shapiro.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Creating a Buzz - Tales of Building WordPress Honeypots at Scale

Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk