Secure software is built, not bolted on. This in-depth secure coding training teaches development teams how to design, write and test software securely, covering the secure development lifecycle, threat modeling, automated testing and secure code review.
Who should attend
- Software developers and technical leads
- Software architects
- QA and test engineers
- Application security and DevSecOps engineers
- Engineering managers who need to set secure development expectations
What you will learn
- The secure software development lifecycle (SDLC) and where security fits
- Security requirements and secure design principles
- Threat modeling: how to find design flaws early
- Common vulnerability classes and how to prevent them, aligned with the OWASP guidance
- Secure coding practices for web applications and APIs
- Authentication, authorization, session management and cryptography
- Input validation, output encoding and error handling
- Dependency and supply chain risks
- Using SAST and DAST tools effectively, and handling their results
- Secure code review techniques
- Security in CI/CD pipelines
- Reference frameworks such as OWASP ASVS and NIST SP 800-218 (SSDF)
Hands-on labs
Participants find and fix vulnerabilities in realistic code examples, practice threat modeling on sample systems and review code for security flaws.
What you receive
- Course materials and exercises
- Secure coding checklists and reference guides
- A certificate of attendance
Frequently asked questions
Build security into how your team develops
Contact us for dates, pricing and corporate options.
Need 24/7 Protection From Cyber Attacks?