OWASP DefectDojo - Introduction and Overview
Learn about DefectDojo, an open-source application vulnerability management tool. Discover its features for streamlining security testing workflows and enhancing vulnerability tracking and remediation processes.
Automating Security Test Cases Based on ASVS
Learn to automate security test cases using ASVS, enhancing your application's vulnerability assessment and overall security posture.
DevSecOps: Dynamic Application Security Testing for Identifying Vulnerabilities
Explore security practices in DevSecOps and learn DAST testing to identify vulnerabilities in deployed applications.
7 Must-Know Steps to Making Modern Web Apps Ultra-Secure
Learn 7 essential steps to enhance web app security. Master prevention of vulnerabilities, implement secure authorization, add security layers, logging, and testing for robust protection.
AI for DevSecOps Engineers - Enhancing Security Culture and Education
Explore AI technologies to enhance security testing, analysis, and education for DevSecOps engineers. Learn to automate processes, identify threats, and improve software quality in CI/CD environments.
DevSecOps Unveiled: Integrating Security in the Development Lifecycle
Explore DevSecOps principles and practices for seamlessly integrating security into the development lifecycle. Learn to foster collaboration, automation, and shared responsibility for proactive vulnerability management.
Building Your First DevSecOps Pipeline
Demystify DevSecOps and build a functional pipeline with cutting-edge security testing, including SCA, SAST, and DAST tooling. Supercharge software security and achieve true "Shift Left" success.
Securing Applications in the Software Development Life Cycle (SDLC) - Beginner
Aprenda prácticas de codificación segura para mitigar riesgos de seguridad y proteger datos en el desarrollo de software moderno.
Defense in Depth: Refocusing on Defensive Security Techniques
Explore defensive product security techniques, emphasizing defense-in-depth and supply chain security. Learn key aspects to consider in your application security strategy.
QA for AI: Testing Machine Learning Applications - The Reality of Developing an Artificial World
Explore challenges and strategies for testing AI applications, focusing on machine learning algorithms, ethical considerations, and ensuring quality in diverse, innovative technologies.
Speed Bumps and Speed Hacks - Adventures in Car Manufacturing Security
Dive into critical security vulnerabilities affecting major car manufacturers' web applications, exploring real-world attacks, impact chains, and the importance of responsible disclosure policies.
LLMs at the Forefront - Pioneering the Future of Fuzz Testing
Explore how Large Language Models revolutionize fuzz testing in cybersecurity, featuring FuzzForest tool demonstrations and practical applications for automated security assessments.
Symfony Security - Authentication, Register Users, Passwords, Access Control
Comprehensive guide to Symfony security: authentication, user registration, password management, access control, and advanced features like voters and testing authorization.
Test Driven Security in Continuous Integration
Discover how Mozilla integrates Test Driven Security into DevOps pipelines, accelerating security issue detection and mitigation while maintaining rapid innovation for Firefox services.
Getting More Confident with Security Helper Libraries Using Go Fuzzing
Explore Go Fuzzing to enhance security helper libraries, detect vulnerabilities, and improve test coverage. Learn from real-world examples and gain confidence in your code's robustness.
Project Monterey: Automating Security Testing in Cloud Deployments
Explore automated security testing for cloud deployments with Project Monterey. Learn how Netflix scales traditional tools and integrates custom solutions for continuous security in a dynamic environment.
Continuous Cloud Security Automation
Distributed framework for scalable security automation in cloud environments. Easily integrates tools, minimizes false positives, and supports continuous software delivery across teams.
Headless Browser Hide and Seek - Offensive Uses and Countermeasures
Explore offensive and defensive uses of headless browsers in web security. Learn techniques for detecting malicious activity, collecting threat forensics, and securing your own tools against potential vulnerabilities.
ZAP Heads Up Display - Introduction and Demo
Explore OWASP ZAP's new Heads Up Display feature for automated web application security testing. Learn about its capabilities, demo, hidden fields, attack modes, and integration with browser APIs.
Leveraging the ASVS in the Secure Software Development Lifecycle
Integrating OWASP ASVS into the secure software development lifecycle to create uniform security requirements, prioritize tasks, and track adherence across applications using existing tools and processes.
How Scripting in ZAP Can Bridge the Gap Between Dev Teams and Security
Learn to bridge dev and security teams using ZAP scripting. Explore opportunities, overcome obstacles, and implement effective testing strategies for enhanced application security.