Skip to content
Making Digital Bharat Surakshit: free VAPT reports for eligible organisations.

Training programme · Intermediate

Web Application Security & Secure Coding

For developers who want to stop vulnerabilities before they ship. Understand how attacks work and fix them in code.

Duration
3 days
Learning Hours
24
Level
Intermediate
Formats
Online · On-site
Certificate
Verifiable certificate on completion

Sample programme details

Syllabus, durations and batch dates shown here are indicative and will be confirmed. Contact us for the latest schedule.

About This Programme

Developers learn how attackers exploit web applications, then practise fixing the same flaws in code. Examples can be adapted to your team’s language and framework for private batches.

By the End, Participants Will Be Able To

  • Recognise the OWASP Top 10 risks in real code
  • Apply secure patterns for authentication, sessions and access control
  • Prevent injection, XSS and CSRF by design
  • Handle secrets, file uploads and errors safely
  • Add security checks to code review and CI pipelines

Syllabus

4 modules
01 How Web Applications Are Attacked
  • Threat modelling basics
  • OWASP Top 10 walkthrough
02 Identity & Access
  • Password storage and MFA
  • Session management
  • Broken access control
03 Input, Output & Data
  • Injection prevention
  • Cross-site scripting and CSP
  • Secure file uploads
04 Secure Delivery
  • Secrets management
  • Dependency risks
  • Security in code review and CI

Hands-On Labs & Case Scenarios

  1. 1

    Find and fix vulnerabilities in a sample application

  2. 2

    Harden an application with security headers and a strict CSP

  3. 3

    Run a secure code review on a pull request

Bring Secure Coding to Your Team

Share how many people you want to train and your preferred dates and format.

Redirecting to the Payment Page…

Preparing your secure checkout. It opens in a new tab.

Processing Payment via the Payment Page

Complete the payment in the payment tab.

Please don't press Back or refresh this page until the payment succeeds or fails. It updates by itself.

Your Payment Is Still in Progress

If you go back now, the payment may still go through, and you would have to check its status yourself. Are you sure you want to go back?

This Is Taking Longer than Expected

Check the new tab. If it shows an error or nothing at all, reload this page. No money has been taken.