← Back to courses
Cybersecurity
Web Application Security: OWASP Top 10
Find and fix the ten most critical web risks, 2025 edition
A classroom course for developers and testers. Each of the ten modules is one category of the OWASP Top 10:2025: you see the weakness in a deliberately vulnerable application, exploit it in the lab, then fix it in code. This course follows the OWASP list and prepares for no exam.
10Modules
IntermediateLevel
2 monthsDuration
COURSE THUMBNAIL
What you will be able to do
Recognise each of the OWASP Top 10:2025 risks in a real application
Test an application for those weaknesses with an intercepting proxy
Fix each weakness in code and configuration
Review a design for security before it is built
Course outline
01
A01 Broken Access Control
02
A02 Security Misconfiguration
03
A03 Software Supply Chain Failures
04
A04 Cryptographic Failures
05
A05 Injection
06
A06 Insecure Design
07
A07 Authentication Failures
08
A08 Software or Data Integrity Failures
09
A09 Security Logging and Alerting Failures
10
A10 Mishandling of Exceptional Conditions
Tools you will use
Burp SuiteOWASP ZAPOWASP Juice ShopBrowser developer toolsDocker
What you need
Working knowledge of how web applications are built (HTML, HTTP and one server-side language)
