Free security resources that your competitors use!
summary
A rapid catalog of concrete, usable artifacts: OWASP Top 10 (now showing Broken Access Control as the top risk), the ASVS level 2 verification matrix, the 90‑question Software Assurance Maturity Model for gap prioritization, and supply‑chain guidance like SLSA/Salsa. Tooling recommendations include OWASP Juice Shop (scorable CTF) and ZAP plus Dependency‑Track and Threat Dragon for automated checks, composition tracking and threat‑model diagrams; examples include code snippets, pseudocode cheatsheets and a 39‑slide roadmap.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:53Open Web Application Security Project
- 6:38A list of lists of vulnerabilities
- 10:20OWASP Proactive Controls
- 12:08OWASP ASVS
- 14:37OWASP Cheat Sheet Series
- 16:02OWASP SAMM
- 19:22OWASP Juice Shop
- 21:11OWASP Zed Attack Proxy (ZAP)
- 22:01OWASP Web Security Testing Guide
- 22:31OWASP API Security Project
- 23:26OWASP Dependency Track
- 26:07OWASP Threat Dragon
- 30:27More projects
- 35:56Application Security Wayfinder
related talks
45mLeveraging Projects and Tools to Transform Your SDLC
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
57mThe Developer's Field Guide to Software Security
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
27mHow to Start Security Testing Without Fear
46mThe Path of Secure Software
59mSecuring the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs