MySmartCoPilot

Your country

Tools that support it use your country for local currency, number formats, units and paper size. Your choice is saved only in this browser.

Security

Web Security (OWASP Top 10:2025)

The planned outline of 17 modules. Lessons are written, run and reviewed before they are published.

Coming soon 17 modules

Coming soon. This track is being written. Below is its planned outline: a lesson appears here once its examples have been run and its technical review is signed off.

Planned outline

  1. Module 1

    Foundations: the web, standards and threat thinking

    Coming soon
  2. Module 2

    A01:2025 Broken Access Control

    Coming soon
  3. Module 3

    A02:2025 Security Misconfiguration

    Coming soon
  4. Module 4

    A03:2025 Software Supply Chain Failures

    Coming soon
  5. Module 5

    A04:2025 Cryptographic Failures

    Coming soon
  6. Module 6

    A05:2025 Injection

    Coming soon
  7. Module 7

    A06:2025 Insecure Design

    Coming soon
  8. Module 8

    A07:2025 Authentication Failures

    Coming soon
  9. Module 9

    A08:2025 Software or Data Integrity Failures

    Coming soon
  10. Module 10

    A09:2025 Security Logging and Alerting Failures

    Coming soon
  11. Module 11

    A10:2025 Mishandling of Exceptional Conditions

    Coming soon
  12. Module 12

    APIs, WebSockets and GraphQL (OWASP API Security Top 10:2023)

    Coming soon
  13. Module 13

    Enterprise SSO and provisioning (SAML 2.0 and SCIM 2.0)

    Coming soon
  14. Module 14

    LLM features (OWASP Top 10 for LLM Applications 2026)

    Coming soon
  15. Module 15

    Security testing and OWASP ZAP in CI

    Coming soon
  16. Module 16

    Vulnerability disclosure and CERT-In reporting

    Coming soon
  17. Module 17

    Secure code review and routine

    Coming soon

Related tools

Content Security Policy (CSP) Generator Build a strict, working CSP with hashes, reporting and ready-to-paste server config. Security Headers Checker Grade a site’s security headers A+ to F and get copy-paste fixes for your server. JWT Decoder Read any JWT and check its signature — without sending the token anywhere. Bcrypt Hash Generator & Verifier Create and verify bcrypt hashes in your browser, with timing and the 72-byte check. Hash Generator Hashes and HMACs of text or huge files, plus checksum verification.

Official documentation

More in Security