OWASP Top 10 Courses and Certifications

Introduces OWASP Top 10 A04:2021 Insecure Design through threat modeling, adversary thinking, and secure application design across the software development lifecycle.

• Cybrary
• 1-2 hours
• Self-Paced
• Paid Course

Hands-on training on OWASP Top 10 A08:2021, using the SolarWinds breach to practice identifying, exploiting, and mitigating software and data integrity failures.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

Focuses on OWASP A07:2021 identification and authentication failures through the Colonial Pipeline ransomware case, guided demos, and hands-on vulnerability labs.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

Hands-on practice identifying misconfigured Jenkins servers and exploiting and mitigating XML External Entity vulnerabilities through OWASP Top 10 labs.

• Cybrary
• 3-4 hours
• Self-Paced
• Paid Course

Learn to identify and exploit the OWASP Top 10’s Server-Side Request Forgery vulnerabilities through Apache Solr testing and hands-on labs.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

Dissects OWASP A06 vulnerable and outdated components through the Apache Struts flaw behind the 2017 Equifax breach, with intercepting-proxy demos and a hands-on exploit lab.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

Learn to identify, exploit, and remediate XML External Entities (XXE), an OWASP Top 10 web application vulnerability, through demonstrations, a scenario, and a lab.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

DevSecCon

OWASP Top 10 Security Risks for Large Language Models

Explore OWASP Top 10 LLM security risks, learn mitigation strategies, and understand the impact of Generative AI on cybersecurity in various industries.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

DevSecCon

OWASP LLM Top 10 - Understanding Critical Security Risks for Large Language Models

Explore OWASP LLM Top 10: Gain insights into critical security risks, learn practical steps to fortify applications, and stay ahead in cybersecurity with expert R Nagarjun.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

OWASP Foundation

15 Years of OWASP Top 10 - Has the Cloud Made a Difference?

A keynote asks whether cloud computing has changed the OWASP Top 10 over its 15-year history.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

OWASP Foundation

Harmonizing OWASP API and Application Top 10 Security Risks - Combining Lists for Comprehensive Coverage

Compare OWASP’s API and application Top 10 risks to see where vulnerabilities overlap, differ, and how to detect and prevent them.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

OWASP Foundation

OWASP Top 10 - Introduction to Web Application Security Risks

An introduction to the OWASP Top 10 flagship project.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

OWASP Foundation

OWASP Top 10 - The Making of the OWASP Top 10 and Beyond

A look at how the OWASP Top 10 is built from vulnerability data, likelihood estimates, and CVSS scoring.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

OWASP Foundation

Vulnerabilities as Ingredients and OWASP Top 10 as Seasoning

A talk frames vulnerabilities as ingredients and the OWASP Top 10 as seasoning for thinking about application security.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Devoxx Poland

What's Not So New in the New OWASP Top 10 - Devoxx Poland 2022

Explore OWASP Top 10 updates, focusing on insecure design. Learn defense-in-depth strategies, secure design principles, and threat modeling methodologies like STRIDE for improved web application security.

• YouTube
• 17 minutes
• Self-Paced
• Free Video