OWASP Foundation Courses

Developer Driven Security in High-Growth Environments

A talk on making security developer-driven in high-growth environments.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

How to Have Visibility and Security of a CI/CD Pipeline

A talk on gaining visibility into a CI/CD pipeline and securing it.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Overcoming the Inundation of Noisy Security Alerts

A talk on reducing the overload of noisy security alerts in application security.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

The Power of DevSecOps in Web3 and Blockchain

A talk on the role of DevSecOps in Web3 and blockchain.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

What We've Learned From Scanning 10K+ Kubernetes Clusters

Ben Hirschberg shares findings from scanning more than 10,000 Kubernetes clusters.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Hacking and Defending APIs - Red and Blue Make Purple

An AppSec talk explores how red and blue teams can work together to hack and defend APIs.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Log Story Short: Chopping Through Forests of Data

A short talk about working through large, complex collections of log data.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Vulnerabilities as Ingredients and OWASP Top 10 as Seasoning

A talk frames vulnerabilities as ingredients and the OWASP Top 10 as seasoning for thinking about application security.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Testability Patterns for Web Applications - A New OWASP Project

Introduces testability patterns for web applications through a new OWASP project.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

OWASP Serverless Top 10 - Understanding Security Risks in Serverless Applications

An OWASP Top 10 overview of security risks specific to serverless applications.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Automated Security Testing With OWASP Nettacker

A conference talk on automated security testing with OWASP Nettacker.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Mobile Application Security Testing - Journey to Version 2.0

A Global AppSec talk titled “Mobile Wanderlust” recounts a journey to version 2.0.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Using IAC to Accelerate Threat Modeling

A talk on using infrastructure as code to accelerate threat modeling.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Over a Decade of Software Security - What Have We Learned

Adam Brown reflects on lessons learned from more than a decade of software security.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Stable, Safer, Faster: How to Avoid Kubernetes Misconfigurations with Automation

See how automation can help prevent Kubernetes misconfigurations and make clusters more stable, safer, and faster.

• YouTube
• 57 minutes
• Self-Paced
• Free Video