Web Security (OWASP Top 10) with AI
OWASP risks with AI-assisted review of YOUR apps — never unauthorized scanning
Module 1
A01 Broken Access Control
IDOR, missing authz, CSRF as access abuse, and SSRF rolled into A01:2025.
6 lessons
Module 2
A02 Security Misconfiguration
Defaults, debug surfaces, headers, CSP, and frame abuse.
5 lessons
Module 3
A03 Software Supply Chain Failures
Dependencies, compromised packages, SBOM, and pinning as defender literacy.
5 lessons
Module 4
A04 Cryptographic Failures
Transit vs rest, password hashing, secrets hygiene, TLS mistakes you can name.
5 lessons
Module 5
A05 Injection
SQL, XSS, and other injection families — mechanism first, own-lab fixes.
5 lessons
Module 6
A06 Insecure Design
Threat modeling lite, business logic, and race/limit design bugs.
5 lessons
Module 7
A07 Authentication Failures
Weak proofs, sessions, JWT pitfalls — authn is not authz.
5 lessons
Module 8
A08 Software or Data Integrity Failures
Unsigned updates, CI trust, and integrity of code and artifacts.
5 lessons
Module 9
A09 Security Logging and Alerting Failures
Useful logs, actionable alerts, and privacy boundaries.
5 lessons
Module 10
A10 Mishandling of Exceptional Conditions
Fail-open vs fail-closed, leaky errors, and recovery under stress.
5 lessons