Practical Web Security
The vulnerabilities that actually show up in web applications, how they are exploited, and how to close them for good.
- Intermediate
- 2h
- 4 modules
- 12 lessons
- 13.3k students
Taught by Alina Costa · Docker, Kubernetes, CI/CD, Application security
What you’ll learn
Think in threat models
Reason about who your attacker is and what they can reach before writing defences.
Close the common holes
Understand and prevent injection, cross-site scripting, and request forgery.
Get authentication right
Sessions, password storage, and multi-factor done the way that survives review.
Harden the deployment
Headers, transport, secrets, and dependencies — the perimeter around your code.
Course content
4 modules · 2h
01Thinking About ThreatsBefore any specific vulnerability: who is attacking, what they want, and what secure defaults look like.24m
02Common Web VulnerabilitiesThe three classic classes, how each is exploited, and the defence that genuinely works.33m
03Authentication Done RightIdentity handled properly: session strategy, credential storage, and additional factors.23m
04Hardening and Supply ChainThe layer around your application: transport, headers, secrets, and the code you did not write.41m