OWASP Foundation Courses

Scaling a Software Security Initiative - Lessons from BSIMM

Insights on scaling software security initiatives from BSIMM, covering best practices, challenges, and strategies for implementing robust security measures across large organizations.

• YouTube
• 51 minutes
• On-Demand
• Free Video

A Hybrid Approach for Web Application Penetration Testing

Explore a hybrid approach to web application penetration testing with expert David Caissy, combining manual and automated techniques for comprehensive security assessments.

• YouTube
• 55 minutes
• On-Demand
• Free Video

OCSP Stapling in the Wild - Lecture

Explore OCSP stapling in the wild with experts Devdatta Akhawe and Emily Stark. Learn about TLS security, browser implementations, and real-world challenges in HTTPS ecosystems.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Serverless Security for DevOps and Defenders

Explore serverless architecture's impact on DevOps and security with James Wickett. Learn how this emerging technology enhances defense strategies and streamlines development processes.

• YouTube
• 44 minutes
• On-Demand
• Free Video

CSP - The Good, the Bad and the Ugly

Explore Content Security Policy's strengths and weaknesses in web application security, presented by Shape Security's engineering manager Ilya Nesterov at APPSEC CA 2017.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Scaling Security Testing at the Speed of DevOps

Explore scaling security testing in DevOps with Roger Seagle. Learn about deployment models, architecture, relay connectivity, and creating effective security tests using Docker and Serverspec.

• YouTube
• 41 minutes
• On-Demand
• Free Video

The Physical Web - Interacting with Anything

Explore the Physical Web and its potential for seamless interaction with everyday objects in this insightful talk by Google's Scott Jensen, a veteran UI designer and strategic planner.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Continuous Security: Bringing Agility to the Secure Development Lifecycle

Bringing agility to secure development: Learn strategies for integrating continuous security practices into your development lifecycle, enhancing both speed and safety in software creation.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Uninvited Guests on the World's Wild Web: Understanding Malicious Web Bots

Explore malicious web bots and automated threats to web applications with insights from the OWASP Handbook. Learn to understand, identify, and mitigate these digital risks in today's wild web landscape.

• YouTube
• 41 minutes
• On-Demand
• Free Video

An SDLC for the DevSecOps Era

Explore an SDLC tailored for the DevSecOps era with insights on integrating security into modern development practices and organizational culture.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Dissecting Browser Privacy

Explore browser privacy with a senior security engineer from Brave, covering key issues and advancements in protecting user data while browsing the web.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Women in Security Panel Discussion

Panel discussion featuring prominent women in cybersecurity sharing insights on industry challenges, career paths, and strategies for increasing diversity and inclusion in the field.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Machine Learning in Cybersecurity - Boon or Boondoggle

Explore machine learning's impact on cybersecurity with Dr. Zulfikar Ramzan. Learn about supervised and unsupervised learning, challenges, and applications in DevOps while gaining insights from a leading industry expert.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Make Me a Sandwich: Automating a Custom SecDevOps Pipeline

Automating SecDevOps: Strategies for building custom pipelines, integrating security tools, and improving efficiency in vulnerability detection and SDLC processes.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Cybersecurity Certification for IoT Software - Pros and Cons

Experts debate the pros and cons of a CyberUL certification for IoT devices, discussing its potential impact on security, innovation, and industry standards in the rapidly expanding digital infrastructure.

• YouTube
• 55 minutes
• On-Demand
• Free Video