Security Courses

OWASP Foundation

Learning to Build an Effective Security Design Review Program

A 300-review retrospective on building an application security design review program that developers engage with and that catches critical flaws before launch.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

OWASP Foundation

Businesses Run On Risk And Debt: Why Communicating Security Risk Is Hard

Examines why cybersecurity teams can struggle to get executives to hear the urgency of security risks, and whether they are speaking different languages.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

OWASP Foundation

OWASP Application Security Verification Standard (ASVS)

Explore how the OWASP ASVS is used in application security and what the working group plans for version 5.0.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

OWASP Foundation

Running Your Application Security Program Like a Marathon

Uses marathon training as a model for setting goals, pacing, monitoring progress, and adapting an application security program.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

OWASP Foundation

Bridging Security and Privacy Standards: Harnessing OpenCRE for Effective Mapping

Compares manual security-standard mappings with OpenCRE’s automated approach, including how expert review can improve and extend those mappings.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

OWASP Foundation

Achieving an Application Security Program with DSOMM

Learn to tailor DSOMM into an organizational maturity model that helps development and operations teams build and improve application security programs.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

OWASP Foundation

OWASP IoT Security Testing Guide (ISTG)

A demonstration of the OWASP IoT Security Testing Guide’s methodology for adaptable, comparable penetration tests of connected devices.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

OWASP Foundation

WebRTC Vulnerabilities: Security Challenges in Real-Time Communication

Explore overlooked WebRTC security risks and practical methods for testing vulnerabilities in real-time audio, video, and data sharing.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

DevConf

Generative AI Safety and Security: A Research and Design Perspective

Learn how prompt injection and jailbreaks exploit language models, and how design guardrails can reduce unsafe or off-topic outputs.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

DevConf

Ensuring API Security in Connected Vehicles

Examines how exposed APIs can compromise connected-car safety, privacy, and fleet operations, using real incidents to show how to recognize system-specific vulnerabilities.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

DevConf

Konflux CI: Transforming Software Delivery with Robust Security and Efficiency

Konflux CI uses build isolation, provenance tracking, and decentralized architecture to support SLSA-compliant software delivery.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

NDC Conferences

Security Champion Worst Practices - How to Avoid Common Failures

Explore common ways security champion programs fail, from weak management support to low engagement, and how to avoid those practices.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Free Video

NDC Conferences

GitHub Actions: A Cloudy Day for Security

See how misconfigured federated identity lets GitHub Actions workflows expose cloud resources to lateral movement and privilege escalation.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

NDC Conferences

Using Developer-Centric Data to Predict, Prioritize, and Improve Application Security Outcomes

A developer-centric use of software team behavior and lifecycle data to prioritize application security initiatives and improve collaboration between security and development teams.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Platform Engineering

Platform Engineering Security: Strategies, Challenges, and Lessons Learned

Learn how a major energy utility integrated cybersecurity into its platform engineering initiative, including the strategies, challenges, and lessons from the work.

• YouTube
• 49 minutes
• Self-Paced
• Free Video