Build a shared vocabulary for application security. Using high-level examples and attack visualizations, learners explore common web vulnerabilities, how they can affect applications, and why they matter to product and technical teams. This foundation helps developers, testers, architects, and managers take part in more informed security discussions about the software they build, assess, or oversee.

The course will cover the following topics:

• Introduction to Application Security
• Injection Attacks: SQL Injection
• Broken Authentication
• Sensitive Data Protection
• XML External Entities (XXE)
• Broken Access Control
• Security Misconfiguration
• Cross-Site Scripting (XSS)
• Insecure Deserialization
• Using Components with Known Vulnerabilities
• Insufficient Logging and Monitoring