One lesson
An individual lesson
This track has no lesson ready to buy yet. Each lesson becomes available only after it is built and reviewed.
$5.00Not available yet
All course tracks
Testing and security · 30 lessons · up to 10 minutes each
OWASP Web Security
A planned web security path grounded in current OWASP guidance and testable controls.
Coming Soon
One-time purchase · USD
Choose what to unlock
Access is attached to your account after payment is verified. No subscription.
Full category
OWASP Web Security
Permanent access to the lessons published in this track when you buy. Future lessons are not included. 0 of 30 lessons are published; 0 are in owner review and 30 are Coming Soon.
$29.0030 lessons still in progress
Beginner
Lessons 1–10
01 OWASP Web Security: Sketch asset and threat boundaries
Topic: asset and threat boundaries
Draw a small map of asset and threat boundaries in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner4 minComing Soon02 OWASP Web Security: Name the parts of injection prevention
Topic: injection prevention
Label the main pieces in injection prevention in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner5 minComing Soon03 OWASP Web Security: Trace an example of access control checks
Topic: access control checks
Follow one input through access control checks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner6 minComing Soon04 OWASP Web Security: Compare choices for authentication failure paths
Topic: authentication failure paths
Write down one practical difference between authentication failure paths in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner7 minComing Soon05 OWASP Web Security: Find the boundary in cryptographic storage choices
Topic: cryptographic storage choices
Mark where cryptographic storage choices in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner8 minComing Soon06 OWASP Web Security: Inspect an example of security misconfiguration
Topic: security misconfiguration
Annotate a minimal example of security misconfiguration in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner9 minComing Soon07 OWASP Web Security: Connect dependency and component risks to a neighboring concept
Topic: dependency and component risks
Show how dependency and component risks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner10 minComing Soon08 OWASP Web Security: Spot a failure mode in logging and monitoring risks
Topic: logging and monitoring risks
Describe one likely failure for logging and monitoring risks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner3 minComing Soon09 OWASP Web Security: Read an official example of SSRF and request boundaries
Topic: SSRF and request boundaries
Summarize an official example of SSRF and request boundaries in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner5 minComing Soon10 OWASP Web Security: Choose a use case for verification against current OWASP guidance
Topic: verification against current OWASP guidance
Match one small use case to verification against current OWASP guidance in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Beginner6 minComing Soon
Intermediate
Lessons 11–20
11 OWASP Web Security: Build an example with asset and threat boundaries
Topic: asset and threat boundaries
Create a small working example that uses asset and threat boundaries in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate4 minComing Soon12 OWASP Web Security: Compose injection prevention with another component
Topic: injection prevention
Combine injection prevention in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon13 OWASP Web Security: Configure access control checks for a small case
Topic: access control checks
Set up access control checks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon14 OWASP Web Security: Validate inputs around authentication failure paths
Topic: authentication failure paths
Add a check around authentication failure paths in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate7 minComing Soon15 OWASP Web Security: Use cryptographic storage choices in a short workflow
Topic: cryptographic storage choices
Add cryptographic storage choices in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate8 minComing Soon16 OWASP Web Security: Refactor security misconfiguration into a reusable unit
Topic: security misconfiguration
Extract security misconfiguration in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate9 minComing Soon17 OWASP Web Security: Exercise dependency and component risks with sample data
Topic: dependency and component risks
Run sample data through dependency and component risks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate10 minComing Soon18 OWASP Web Security: Observe logging and monitoring risks outputs
Topic: logging and monitoring risks
Capture the result of logging and monitoring risks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate3 minComing Soon19 OWASP Web Security: Recover from a SSRF and request boundaries failure
Topic: SSRF and request boundaries
Handle one expected failure from SSRF and request boundaries in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon20 OWASP Web Security: Document verification against current OWASP guidance behavior
Topic: verification against current OWASP guidance
Write a short usage note for verification against current OWASP guidance in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon
Advanced
Lessons 21–30
21 OWASP Web Security: Test a boundary around asset and threat boundaries
Topic: asset and threat boundaries
Add an edge-case test for asset and threat boundaries in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced4 minComing Soon22 OWASP Web Security: Harden injection prevention
Topic: injection prevention
Add the relevant access, safety, or validation control to injection prevention in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced5 minComing Soon23 OWASP Web Security: Measure access control checks
Topic: access control checks
Record a small baseline for access control checks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced6 minComing Soon24 OWASP Web Security: Reduce cost in authentication failure paths
Topic: authentication failure paths
Change one measurable cost in authentication failure paths in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced7 minComing Soon25 OWASP Web Security: Diagnose a cryptographic storage choices failure
Topic: cryptographic storage choices
Use an observable signal to explain a failure in cryptographic storage choices in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced8 minComing Soon26 OWASP Web Security: Make security misconfiguration repeatable
Topic: security misconfiguration
Show that rerunning security misconfiguration in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced9 minComing Soon27 OWASP Web Security: Review trade-offs in dependency and component risks
Topic: dependency and component risks
Compare two documented approaches to dependency and component risks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced10 minComing Soon28 OWASP Web Security: Improve logging and monitoring risks maintainability
Topic: logging and monitoring risks
Refine logging and monitoring risks in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced3 minComing Soon29 OWASP Web Security: Verify SSRF and request boundaries end to end
Topic: SSRF and request boundaries
Check that a complete small flow using SSRF and request boundaries in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced5 minComing Soon30 OWASP Web Security: Audit verification against current OWASP guidance against its source docs
Topic: verification against current OWASP guidance
Check the implementation of verification against current OWASP guidance in the context of web application attack surfaces and OWASP verification guidance; save a short example or check that demonstrates the result.
Advanced6 minComing Soon
Reference documentation
References support the selected track topics while its lesson content is built and reviewed progressively.
This track is a catalog outline only. Each lesson remains unavailable until it is built and personally reviewed.