OWASP Foundation Courses

Continuous Kubernetes Security - Best Practices and Risk Mitigation

Explore Kubernetes security landscape, risks, and best practices. Learn to configure least-privilege access, isolate workloads, and maintain secure configurations across cluster rebuilds.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Modern XSS Defense Strategies - Frameworks, CSP, and Sanitization

Explore modern XSS defense strategies, including JavaScript frameworks, CSP deployment, HTML sanitization, and design considerations for building secure web applications against evolving threats.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Making Continuous Security a Reality with OWASP's AppSec Pipeline

Learn to implement continuous security testing using OWASP's AppSec Pipeline tool. Discover field-tested methods, Docker containers for automation, and integration with OWASP Defect Dojo for issue management.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Docker 201 Security - Top 10 Security Practices for Containers

Learn Docker security best practices, including top 10 security bullet points, common pitfalls to avoid, and advanced techniques for tightening container security in both Docker and Kubernetes environments.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Time Lock Puzzles for Good and Evil

Explore timelock puzzles in cybersecurity: their history, offensive and defensive applications, novel constructions, weaponization techniques, detection methods, and challenges in both malicious and benign use cases.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Secure Messengers and Man in the Contacts Attack

Explore the Man in the Contacts attack, its implementation in a mobile game, and its potential for spear phishing in secure messaging apps. Learn about vulnerabilities and possible mitigations.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Scaling Security in Leading Companies - DevOps and CI/CD Best Practices

Discover pro-tips and actionable lessons from mature security teams on scaling security in modern software development. Learn effective strategies for buy-in, engineering projects, analysis integration, and production monitoring.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Don't Feed the Hippos - Improving Security Communication with Developers

Explore common security communication failures and learn effective strategies for collaborating with developers to address software vulnerabilities and enhance overall security practices.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Passive Fingerprinting of HTTP/2 Clients

Explore HTTP/2 protocol nuances for passive client fingerprinting. Learn about implementation differences, potential use cases, and security implications in this comprehensive overview.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

OWASP Serverless Top 10 - Security Risks and Protections

Explore serverless security risks, challenges, and protective measures. Learn about OWASP Serverless Top 10 and DVSA tool for understanding serverless security implications and processes.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Software Security 5D Framework - Evolution of Security Verification

Explore the OWASP Software Security 5D Framework and its impact on integrating security bugs into the software lifecycle, revolutionizing traditional assessment methods.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Black Clouds and Silver Linings in Node.js Security

Explore Node.js security challenges and mitigation strategies. Learn from real-world incidents to build secure JavaScript applications and understand ecosystem responsibilities.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Defending Cloud Infrastructures with Cloud Security Suite

Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Secure Coding Lessons for Mobile Apps - Insights from the Trenches

Explore common mobile app coding pitfalls, their real-world impacts, and learn effective strategies to enhance security. Includes demonstrations of attacker techniques and protective code samples.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Trusted Types: End-to-End Injection Safety at Scale

Learn about Google's approach to achieving high-level XSS safety through integrated tools and developer-friendly practices, with insights on implementing similar security in open-source stacks.

• YouTube
• 36 minutes
• Self-Paced
• Free Video