OWASP Foundation Courses

Credential Sharing as a Service: The Dark Side of No-Code

Explore the security risks of no-code platforms and credential sharing services, uncovering potential vulnerabilities and mitigation strategies for modern application development.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Server-Side Prototype Pollution: Detection and Exploitation Techniques - OWASP AppSec Dublin

Explore server-side prototype pollution vulnerabilities, detection techniques, and prevention strategies in web applications with security expert Gareth Heyes.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Narrow - SCA Reachability Analysis Without The Effort

Explore efficient SCA reachability analysis techniques to enhance software security without excessive effort, presented by Josiah Bruner at Global AppSec Dublin.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Ten DevSecOps Culture Failures

Explore common pitfalls in implementing DevSecOps culture and learn strategies to overcome them for more effective security integration in software development.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

More with Less Screen Time: An Application Security Toolchain

Discover efficient application security strategies and toolchains to maximize productivity while minimizing screen time in this insightful conference talk by Spyros Gasteratos.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Empowering the Guardians of Your Code Kingdom

Explore strategies for empowering developers to become guardians of code security, enhancing application protection and fostering a security-first mindset in software development.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

JavaScript Realms - The Blank Spot in Web Application Runtime Security

Explore JavaScript Realms and their impact on web application runtime security, uncovering potential vulnerabilities and mitigation strategies.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Don't Let Bug Bounty Kill Your AppSec Posture

Explore strategies to maintain a robust application security posture while leveraging bug bounty programs effectively in this insightful conference talk.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Preventing Subdomain Takeover with OWASP Domain Protect

Learn to prevent subdomain takeovers using OWASP Domain Protect. Enhance your application security knowledge with practical strategies and tools.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Philosophizing Security in a Mobile-First World

Explore security challenges and strategies in a mobile-centric world, examining philosophical approaches to safeguarding applications and data in the era of ubiquitous mobile devices.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

OWASP Coraza: The Way to WAF in 2023

Explore OWASP Coraza, a cutting-edge Web Application Firewall (WAF) solution, and learn how it enhances web security in 2023 through advanced features and implementation strategies.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Incorporating Software Assurance with OWASP SAMM V2.1

Enhance software assurance practices using OWASP SAMM V2.1, a comprehensive framework for implementing and measuring security activities throughout the development lifecycle.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Supply Chain Security with Dependency Track

Explore supply chain security using Dependency Track with experts Anandan, Bhargava, and Duster. Learn strategies to mitigate risks and enhance software security in this informative session.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Shifting Security Everywhere

Explore strategies for integrating security throughout the software development lifecycle, emphasizing proactive measures and collaboration between development and security teams.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Free Video

Removing Secrets to Make Mobile Apps More MASVS-Secure

Explore mobile app security, focusing on removing secrets and enhancing MASVS compliance. Learn defense strategies against various attacks and discover a resilient authentication architecture.

• YouTube
• 48 minutes
• Self-Paced
• Free Video