Application Security: Secure Coding, SAST & DAST

Learn the AppSec workflow used to find and fix vulnerabilities earlier. Curriculum: 1) Secure SDLC and threat modelling; 2) Common coding flaws and safe patterns; 3) SAST fundamentals and triage; 4) DAST fundamentals in test environments; 5) Dependency and secret scanning; 6) False-positive handling and risk prioritisation; 7) CVSS basics and remediation SLAs; 8) Developer-friendly findings and retesting; 9) Mini project: security review checklist for a sample app.

Prerequisites: Basic programming and web concepts. Level: Intermediate.