OWASP Foundation Courses

Trusted Types: A World Without XSS

Explore cutting-edge web security with Trusted Types, a powerful defense against XSS attacks. Learn implementation strategies and best practices from industry experts.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

OWASP WrongSecrets - We Have a Secret for Everyone

Explore common pitfalls in secret management and learn best practices for securing sensitive information in various environments, from local setups to cloud deployments.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Layered Threat Modeling: An Architectural Approach

Explore architectural threat modeling techniques to identify and mitigate security risks in complex systems, enhancing overall application and infrastructure protection.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Shift Left Security with the Security Test Pyramid

Explore the concept of shifting security testing left in the development process using the Security Test Pyramid, enhancing software security from the early stages.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Landmines in the API Landscape

Explore potential security vulnerabilities in API development and learn strategies to mitigate risks in this insightful talk by a cybersecurity expert.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Understanding the Complete Chain of Application Security Using OpenCRE.org

Explore a comprehensive approach to application security using openCRE.org, covering key concepts and best practices for robust software protection.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

OWASP Juice Shop Project

Explore web application security with OWASP's intentionally vulnerable Juice Shop, learning about common vulnerabilities and how to exploit and defend against them.

• YouTube
• 1 hour
• Self-Paced
• Free Video

OWASP Dependency Check Project

Learn to identify and mitigate vulnerabilities in software dependencies using OWASP's powerful open-source tool, enhancing your application's security and reducing potential risks.

• YouTube
• 1 hour
• Self-Paced
• Free Video

OWASP Cheatsheets Project

Comprehensive guide to web application security best practices, covering key areas like input validation, authentication, and secure coding techniques.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

OWASP ZAP Project: Introduction to Web Application Security Testing

Learn to use OWASP ZAP, a powerful open-source web application security scanner. Discover its features, capabilities, and best practices for identifying vulnerabilities in web applications.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

OWASP Application Security Verification Standard (ASVS) Project Overview

Explore the OWASP Application Security Verification Standard (ASVS) project, its importance in secure software development, and practical implementation strategies.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

OWASP SAMM Project - Introduction to Software Assurance Maturity Model

Explore the OWASP SAMM framework for software assurance, learning key strategies to integrate security practices throughout the software development lifecycle.

• YouTube
• 1 hour
• Self-Paced
• Free Video

What's New in CRS4 - An Update from the OWASP CRS Project

Explore the latest updates and enhancements in CRS4, the OWASP Core Rule Set project, with insights on improved web application security and threat mitigation strategies.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

OWASP Open Application Security Curriculum Project

Learn essential application security concepts and practices from OWASP's comprehensive curriculum, designed to enhance your skills in identifying and mitigating software vulnerabilities.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

OWASP DSOMM Project - Introduction to DevSecOps Maturity Model

Explore the OWASP DSOMM Project, a framework for enhancing software security practices and measuring DevSecOps maturity in organizations.

• YouTube
• 29 minutes
• Self-Paced
• Free Video