Security Courses

OWASP Foundation

Security as Code: A DevSecOps Approach

Explore DevSecOps principles and practices for integrating security into the software development lifecycle, emphasizing automation and collaboration for robust application security.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

OWASP Foundation

Shift Left Security with the Security Test Pyramid

Explore the concept of shifting security testing left in the development process using the Security Test Pyramid, enhancing software security from the early stages.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

OWASP Foundation

Understanding the Complete Chain of Application Security Using OpenCRE.org

Explore a comprehensive approach to application security using openCRE.org, covering key concepts and best practices for robust software protection.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

OWASP Foundation

OWASP ZAP Project: Introduction to Web Application Security Testing

Learn to use OWASP ZAP, a powerful open-source web application security scanner. Discover its features, capabilities, and best practices for identifying vulnerabilities in web applications.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

OWASP Foundation

OWASP Application Security Verification Standard (ASVS) Project Overview

Explore the OWASP Application Security Verification Standard (ASVS) project, its importance in secure software development, and practical implementation strategies.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

OWASP Foundation

OWASP Open Application Security Curriculum Project

Learn essential application security concepts and practices from OWASP's comprehensive curriculum, designed to enhance your skills in identifying and mitigating software vulnerabilities.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

OWASP Foundation

Automate Security - Lessons Learned from Successful Security Automation Programs

Learn key strategies for successful security automation, increasing team efficiency, and engaging external teams. Gain insights from real-world examples to kickstart your automation journey and achieve rapid results.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

OWASP Foundation

Data as a New Security Boundary - Cryptography and Supporting Controls

Explore data security through cryptography as a boundary, covering end-to-end encryption, application-level protection, and supporting controls for real-world implementation across various contexts.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

OWASP Foundation

Azure Vulnerability Testbed (AzGOAT) - Understanding and Hardening Azure Security

Explore Azure security vulnerabilities and defenses with AzGOAT, a lab environment for understanding attack surfaces, designing secure solutions, and minimizing threats in Azure environments.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

OWASP Foundation

Pwning IoT Devices Through Their Applications - From AppSec to IoT Security

Explore IoT device vulnerabilities through application security techniques, from firmware analysis to code review, leading to six new CVEs and insights on responsible disclosure.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

OWASP Foundation

How Hackers Can Breach CI/CD Systems - Security Vulnerabilities and Mitigation

Explore vulnerabilities in CI/CD systems, including IDE leaks, role granularity issues, and environment leaks. Learn exploitation techniques and mitigation strategies through live demos and practical examples.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

OWASP Foundation

Investigating WebSocket Server Security - Beyond HTTP

Investigates WebSocket server security, introducing new tools for endpoint discovery, server fingerprinting, and vulnerability detection. Focuses on implementation-level differences in open-source libraries.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

OWASP Foundation

Harmonizing OWASP API and Application Top 10 Security Risks - Combining Lists for Comprehensive Coverage

Explore API security risks, comparing OWASP's API and Application Top 10 lists. Learn detection and prevention strategies for vulnerabilities in web services, APIs, and GraphQL.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

OWASP Foundation

Hacking Ethereum-based DApps - Security Vulnerabilities and Protections

Explore Ethereum-based DApps vulnerabilities and security measures. Learn attack techniques and protection strategies for blockchain applications.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

OWASP Foundation

How to Build a Security Mindset Through Storytelling

Discover how to cultivate a security mindset using storytelling and mutual teaching inspired by Maori culture. Learn effective strategies to improve workplace security practices and behaviors.

• YouTube
• 48 minutes
• Self-Paced
• Free Video