
Learn web security essentials for web developers, covering HTML security, JavaScript security, NPM security, NodeJS and GitHub security, and security testing across seven lessons.
Discover why web security matters to prevent revenue loss from increased operating costs, customer loss, and legal fines, with real-world examples and key regulations like GDPR, HIPAA, and PCI DSS.
Explore the OWASP top ten vulnerabilities, learn how broken access control, cryptographic failures, and injection arise, and apply best practices to prevent them with robust authentication and secure design.
Learn secure html practices to prevent cross-site scripting by using textContent instead of innerHTML, apply cryptographic hashes with integrity attributes, and implement CSRF tokens to defend against cross-site request forgery.
Learn to prevent SQL and NoSQL injections by using parameterized queries, implement secure Http headers like CSP, HSTS, and Cors, and enable Google OAuth authentication in a Node.js web app.
Identify fake packages from typosquatting, compromised npm accounts, and vulnerable packages, and verify install commands, research packages, and run npm audit to patch issues.
Learn to set up ESLint with security features and run automated vulnerability checks with OWASP ZAP for internal code security and external web app testing.
Learn to secure secrets and environment variables on GitHub, configure branch protection and authentication, and automate security checks via CodeQL and Snake in GitHub Actions.
Complete this course on web security for web developers and apply the expanded knowledge to secure your web applications. Reach out on Instagram or TikTok dms, or Ronin Tech ProtonMail.
Develop ongoing web security skills through curated resources, essential books, and hands-on pen testing labs on TryHackMe and Hack The Box, with OWASP updates and instructor contact for questions.
Welcome to the course Web Security for Web Developers.
This short course is offers a comprehensive introduction to web security, tailored specifically for web developers.
In this digital age where web-based cyber attacks are becoming more frequent and contributing to revenue loss in organizations, there are an alarming number of web developers who have no knowledge in web security and are neglecting to implement robust security in their web services. This lack of security awareness amongst web developers results in severe consequences, including data breaches, legal ramifications, and damaged reputations.
By taking this course, you are taking steps to differentiate yourself from other developers by learning skills in web security. By learning why web security matters, important web vulnerabilities in today's web, and integral web security practices to follow when developing web applications, you are developing skills demanded by organizations to help build their web services securely and protect their digital assets.
I’m Ronan from ronantech, and I’m excited to guide you through this short course teaching you how to write secure code in web development. I’m a 20 year old software developer and cybersecurity specialist posting content on Tiktok / IG to my 50k total fans. Through my experience working for YC startups, placing well in CTFs, and winning hackathons like HackHarvard, I’ve equipped myself with strong knowledge of secure architecture and coding practices in web development.
Ready to start?