OWASP Foundation Courses

Secure Agile Development According to SAMM

Learn to integrate security into Agile development using SAMM principles. Explore challenges, practical solutions, and a hygiene approach for effective secure software development.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

OWASP SAMM2 - Your Dynamic Software Security Journey

Explore OWASP SAMM2's dynamic approach to software security, enhancing your development practices and strengthening application defenses throughout the lifecycle.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

An Infosec Timeline - Noteworthy Events From 1970 to 2050

Explore key infosec events from 1970 to 2050, covering past milestones and future predictions in cybersecurity. Gain insights into the evolution and potential future of information security.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

A DevSecOps Tale of Business, Engineering, and People

Explore DevSecOps through a historical lens, examining its impact on business, engineering, and resilience. Learn from past challenges to build high-performing teams and implement effective DevSecOps strategies.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Talent Matters: Preventing Burnout and Building Strong AppSec Teams

Caroline Wong discusses preventing burnout, attracting talent, and growing strong application security teams in the face of industry challenges like talent shortages and increasing workloads.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Diversity and Inclusion in Cybersecurity - More Than Just Gender

Explore the importance of diversity in cybersecurity, its benefits, challenges, and actionable steps to improve inclusion. Learn from real experiences and insights on fostering a more diverse industry.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Building an AppSec Program with a Budget of $0 - Beyond the OWASP Top 10

Explore OWASP projects to build a comprehensive AppSec program without spending money. Learn how to implement open-source tools for training, development, testing, and defense to create a robust security framework.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Gamifying Developer Education with CTFs

Explore how Capture The Flag challenges can be used to enhance developer security awareness through hands-on lessons in offensive security concepts, improving overall application security.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Winning - The Future Perspective in the Next 20 Years

Explore the future of application security with insights on emerging trends, challenges, and strategies for success over the next two decades.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Building a Valid Threat Library for Cloud-Based Applications

Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

The Perimeter Has Been Shattered - Mobile and IoT Security Challenges

Explore how mobility and IoT have disrupted traditional enterprise security, examining new threats and the limitations of current defenses. Learn practical strategies to improve mobile and IoT security in the modern landscape.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Securing Containers on the High Seas

Strategies for secure container implementation, focusing on infrastructure, architecture, tooling, policies, and processes. Explores container lifecycle security from development to production.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Testing iOS Apps without Jailbreak - Penetration Testing Techniques

Learn techniques for penetration testing iOS apps without jailbreaking, including live demos on accessing protected resources on the latest iOS version. Ideal for pentesters facing jailbreak limitations.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Jumpstarting Your DevSecOps Pipeline with IAST and RASP

Learn to create an effective DevSecOps pipeline using free tools like IAST and RASP. Gain real-time security feedback, continuous vulnerability analysis, and enhanced attack visibility for improved application security.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Continuous Kubernetes Security - Best Practices and Risk Mitigation

Explore Kubernetes security landscape, risks, and best practices. Learn to configure least-privilege access, isolate workloads, and maintain secure configurations across cluster rebuilds.

• YouTube
• 46 minutes
• Self-Paced
• Free Video