Product and technical managers make decisions that shape application risk, even when they are not writing code. This course uses high-level examples and attack visualizations to explain common web vulnerabilities and their potential impact. It equips managers and team leads to discuss risks with technical teams and make better-informed prioritization decisions.

The course will cover the following topics:

• Introduction to Application Security
• Injection
• Broken Authentication
• Sensitive Data Protection
• XML External Entities (XXE)
• Broken Access Control
• Security Misconfiguration
• Cross-Site Scripting (XSS)
• Insecure Deserialization
• Using Components with Known Vulnerabilities
• Insufficient Logging and Monitoring