This learning path helps application developers recognize common vulnerabilities and understand how development decisions can introduce or reduce security risks. Through attack examples, code walkthroughs, and mitigation guidance, learners examine weaknesses in application design and implementation and consider practices for addressing them in their own work.

This Learning Path includes the following courses:

• Introduction to Application Security
• Injection
• Broken Authentication
• Sensitive Data Protection
• XML External Entities (XXE)
• Broken Access Control
• Security Misconfiguration
• Cross-Site Scripting (XSS)
• Insecure Deserialization
• Using Components with Known Vulnerabilities
• Insufficient Logging and Monitoring
• Server-Side Request Forgery
• Securing the Supply Chain: Maintaining Software and Data Integrity
• Cross-Site Request Forgery
• Open Redirect
• Foundational Exam for Developers
• *Course descriptions to follow individually