OWASP Foundation Courses

Hunting Path Traversal in Open Source Software

Discover techniques for identifying and exploiting path traversal vulnerabilities in open-source software through practical hunting methodologies.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Don't Make This Mistake - Painful Learnings of Applying AI in Security

Uncover painful learnings and common pitfalls when implementing AI solutions in cybersecurity through real-world experiences and practical insights.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Automating Threat Modeling - Challenges and AI Solutions

Discover how AI can revolutionize threat modeling by automating security assessments and overcoming traditional challenges in cybersecurity risk analysis.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Building Resilient Applications with Effective Threat Modeling

Discover how to build resilient applications through effective threat modeling techniques with expert insights from security professionals.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

No Fate But What We Make - Doing Intrusion Prediction

Discover how to predict and prevent cyber intrusions through advanced threat analysis and proactive security methodologies in this cybersecurity presentation.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Everyone Can Play! Building CTFs for Non-Security Folks

Discover how to create engaging Capture The Flag competitions that welcome participants from all technical backgrounds, not just cybersecurity experts.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Getting an LLM to Hack Itself - On AI, Moral Dilemmas, and Security

Explore AI security vulnerabilities and ethical challenges as John Walker demonstrates how large language models can be manipulated to compromise themselves.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

The Carrot vs The Stick - Making a Positive Impact on the Security and Developer Relationship

Discover how to build positive relationships between security teams and developers using collaborative approaches rather than punitive measures.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

The Past, Present, and Future of Automated Remediation

Explore the evolution of automated remediation from its origins to cutting-edge developments and future possibilities in cybersecurity.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Analyzing Zero Trust Architecture in the Age of Agentic GenAI

Explore Zero Trust Architecture principles and their critical application in securing agentic GenAI systems and environments.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

No Admittance Except on Party Business - A Hobbit's Memoir about an InfoSec Journey

Discover Kevin Johnson's personal InfoSec journey through a unique Hobbit-themed memoir, exploring cybersecurity challenges and insights in an engaging 48-minute talk.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Day in the Life of a Supply Chain Security Researcher

Discover what supply chain security researchers do daily through insights from industry experts discussing real-world challenges and methodologies.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Uncovering 100k Security Violations - Strengthening Application Security Through Unified Deployments

Discover how to uncover 100k security violations and strengthen application security through unified deployments, XRAY integration, and automated SBOM generation techniques.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Supercharge Your APPSEC Program with OWASP - Appdome Consumer Mobile Security Report and OWASP MASVS

Discover how to enhance mobile application security using OWASP MASVS standards and Appdome's consumer security insights for stronger APPSEC programs.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Outside the Ivory Tower - Connecting Practice and Science

Discover how to bridge the gap between academic research and real-world cybersecurity practice in this insightful keynote from OWASP Global AppSec EU 2025.

• YouTube
• 55 minutes
• Self-Paced
• Free Video