What Are Software and Data Integrity Failures and How Do You Prevent Them?
Software and data integrity failures let attackers slip hostile code through your updates, dependencies, and build pipeline. Here is how to stop them.
What Are Identification and Authentication Failures and How Do You Prevent Them?
Identification and authentication failures rank seventh on the OWASP Top 10. Learn how attackers break logins and sessions, and how to shut each path down.
What Are Vulnerable and Outdated Components and How Do You Prevent Them?
Vulnerable and outdated components rank sixth on the OWASP Top 10. Learn why known flaws go unpatched and how to find and fix them in your software.
What Is Security Misconfiguration and How Do You Prevent It?
Security misconfiguration appears in 90% of tested applications. Learn where it hides and how to prevent it in your organization.
What Is Insecure Design and How Do You Prevent It?
Insecure design is a flaw built into your architecture, not your code. See why OWASP ranks it the fourth web risk and how to prevent it.
What Are Cryptographic Failures and How Do You Prevent Them?
Cryptographic failures expose sensitive data through weak or missing encryption. See why OWASP ranks it the second web risk and how to prevent it.
What Is Broken Access Control and How Do You Prevent It?
Broken access control lets one user reach another’s data by changing a number. See why OWASP ranks it the top web risk and how to shut it down.
What Is Server-Side Request Forgery (SSRF) and How Do You Prevent It?
Server-side request forgery turns your own trusted server into an attacker’s tool. See how SSRF works and how your team shuts it down.
What Is Cross-Site Request Forgery (CSRF) and How Do You Prevent It?
Cross-site request forgery tricks a signed-in user into sending requests they never meant to. See how CSRF works and how your team shuts it down.
What Is Cross-Site Scripting (XSS) and How Do You Prevent It?
Cross-site scripting lets attackers run malicious code in the browser of every visitor. See how XSS works and how your team prevents it.
