Path icon Learning Paths
Skills

Secure Coding Using OWASP Top 10

  • Number of Courses9 courses
  • Duration26 hours

*This path is still in development.

OWASP Top 10 ranks and categorizes security risks in an easily digestible format. This however is only the tip of the spear in regards to enabling teams to build and maintain secure web applications. The language-agnostic course, OWASP Top 10: The Big Picture, will always cover the latest version of the top 10 as well as introduce several other OWASP foundation projects designed to enable organizations.

We will introduce the OWASP Top 10 Proactive Controls, giving general secure coding guidelines, the OWASP ASVS (Application Security Verification Standard), giving secure coding requirements to build and test against, and the OWASP SAMM (Software Assurance Maturity Model), giving a framework to evaluate each companies’ application security maturity and provide logical steps to increase that maturity level.

The language-specific courses will follow the same model as OWASP Top 10: The Big Picture, but will provide language-specific examples, demonstrations, and guidance.

Courses in this path

Entry-Level

This section covers entry-level content.

OWASP Top 10: The Big Picture

  • by Hampton Paulk
  • 1h 24m Duration
  •  (184)

Practitioner

This section covers practitioner content.

Secure Coding with C#

  • by Alexander Tushinsky
  • 3h 32m Duration
  •  (41)

Secure Coding in ASP.NET Core

  • by Gavin Johnson-Lynn
  • 4h 39m Duration
  •  (31)

Secure Coding in Java

  • by Paul Mooney
  • 2h 48m Duration
  •  (11)

Secure Coding in React

  • by Paul Mooney
  • 1h 5m Duration
  •  (18)

Secure Coding in Go

  • by Paul Mooney
  • 4h 13m Duration
  •  (17)

Secure Coding in Vue 3

  • by Peter Mosmans
  • 2h 4m Duration

Secure Coding in Django 4

  • by Sangeeta Singh
  • 3h 7m Duration

Secure Coding in Angular

  • by Alisa Duncan
  • 2h 56m Duration
  •  (26)

Learn with the best

Hampton Paulk
Hampton Paulk
Hampton is an old fart dev that dabbles in data and security, and now teaches full time here at PS. He is bound to teach you something - leading through example and subjective opinion. He is an acquired taste, sweet on the inside with a sour exterior. He also loves honest feedback, so don't hold back.
Alexander Tushinsky
Alexander Tushinsky
Alex has spent the past 30+ years working as a software developer, application architect, cybersecurity professional, and technical trainer. He is a lifelong learner and holds over 20 active certifications in IT. Alex is a Microsoft Certified Trainer and enjoys sharing his knowledge with others. He has taught at Rutgers University, Bergen Community College, County College of Morris, College of Southern Nevada, and UNLV. He holds a BS in Software Development and a Masters in Cybersecurity from We... more
Gavin Johnson-Lynn
Gavin Johnson-Lynn
Gavin has 20 years’ experience writing software in regulated environments and for global organisations. The last five years of his development career were spent with a focus on security, becoming the security lead for a significant payments project at a FTSE 100 company. He has experience with languages from COBOL to .Net and many languages in between. Gavin's experience of secure development revealed a passion for security, leading him to become a speaker and blogger on the subject. He has held... more
Paul Mooney
Paul Mooney
Paul is an accomplished cybersecurity expert known for building military-grade security systems and developing robust protection against malicious bots. As Chief Software Architect for a major US healthcare group, Paul excels in implementing secure solutions for critical environments. With his knowledge and hands-on experience, you will gain practical insights to construct cutting-edge security systems and defend against evolving cyber threats. By watching Paul's courses, you will acquire the sk... more
Peter Mosmans
Peter Mosmans
Peter started out in the nineties as software engineer working on internet banking applications for various European financial institutions. After developing, he moved to the role of defending and designing systems and networks for high-availability websites. Since 2004 he started specializing in breaking: pentesting complex and feature-rich web applications. Currently he leads a global team of highly skilled penetration testers as lead pentester. He is a contributor to several open-source penet... more
Sangeeta Singh
Sangeeta Singh
Sangeeta is a senior backend engineer with over 8 years of experience in developing highly scalable software, some of which are used by millions of users and many of the fortune 500 companies. She has worked with all sort of technology and softwares, ranging from systems programming for mission critical softwares at the RnD division of HPE, to predictive network analysis for a network at Packet Design, then leading development of critical components of Cloud backup softwares at Druva and now del... more
Alisa Duncan
Alisa Duncan
Alisa Duncan is a full-stack developer, content creator, conference speaker, and community builder who loves the thrill of learning new things. She is a Google Developer Expert in Angular, a Women Techmaker Ambassador, ngGirls core team member, and a volunteer at community events supporting underrepresented groups entering tech.

Join our learners and upskill
in leading technologies