Web Security course
The course provides the skills and the methodologies needed to protect web applications from cyber threats.
- Duration
- 2 days
- Hours
- 14 hours
- Format
- Lectures and hands-on lab
- Delivery
- By video conference or on site
- Participants
- Up to 12
- Language
- English or Italian
- Level
- Beginner
- Who it is for
- Developers, software architects, DevOps
- Prerequisites
- Basic use of the Linux command line; use of a terminal text editor; knowledge of at least one programming language
A priority topic
Cybersecurity is today a priority for corporate IT managers and for all the key people inside the company, who are by now aware of how important a sound information security policy is.
Interactive learning
The course combines theory with a hands-on lab on our cloud systems. The number of participants is limited so that everyone can really interact with the instructor.
Real experience
Our instructors come from extensive experience in information security and cloud native technologies. This makes it possible to go into the advantages and the problems of each individual tool in detail.
Course outline
- Risk analysis methodologies: introduction to OSSTMM and OWASP
- Approach to requirements analysis
- OWASP / OWASP Top 10
- Broken Access Control (lab)
- Cryptographic Failures (lab)
- Injection: XSS and SQL injection (lab)
- Insecure Design (lab)
- Vulnerable and Outdated Components (lab)
- Identification and Authentication Failures (lab)
- Software and Data Integrity Failures (lab)
- Security Logging and Monitoring Failures
- SSRF (lab)
After the course
The penetration testing course provides the skills to carry out an in-depth analysis of IT systems, bring their weaknesses to light and define the mitigation actions to take.
Other courses
- Penetration Testing courseProvides the methodologies to carry out an in-depth security analysis of IT systems.
- Kubernetes courseAcquire the skills to make the most of Kubernetes and the cloud native tools.
Related services
- DevOps ConsultingDevOps consulting: reliable releases, infrastructure as code, cloud costs under control and a platform ready for AI agents.