Professional training – IT Security

Web Application Security with OWASP

Get confident with Web Application Security with OWASP in 6 hours: focus on OWASP Top Ten, SQL Injection & XSS and Authentifizierung & Session-Management, live with a trainer, online or on-site.

Duration
6 hours, one session
Level
Intermediate
Format
Online or on-site
Language
German or English
Certificate
Certificate of attendance

Overview

“Web Application Security with OWASP” is designed for roles such as Information security officers and security managers and Administrators and IT operations teams. In 6 hours you work your way through OWASP Top Ten, SQL Injection & XSS and Authentifizierung & Session-Management in a structured way – with plenty of practice and time for your questions.

IT security is not purely a technical matter: attacks hit people, processes and systems alike. Our courses cover the organisational side (management systems, standards, contingency planning) as well as the technical side (attack methods, hardening, detection, response). They are aimed at security officers, administrators, developers and business units. Every course combines short expert input with exercises based on realistic scenarios, lab environments and checklists you can apply in your organisation right away. Training is delivered online or on site at a fixed price per participant.

The course is delivered live – either online in a virtual classroom or on-site in our training rooms in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run it exclusively for your team.

Focus areas of the course

OWASP Top TenSQL Injection & XSSAuthentifizierung & Session-ManagementAccess Control & IDORBurp SuiteSecurity Headers & CSP

Who is this course for?

  • Information security officers and security managers
  • Administrators and IT operations teams
  • Developers and software architects
  • Managers and business units with security responsibilities

What you will be able to do

  • You know the key topics of Web Application Security with OWASP – OWASP Top Ten, SQL Injection & XSS, Authentifizierung & Session-Management, Access Control & IDOR, Burp Suite and Security Headers & CSP – and can apply them in practice.
  • You understand the core concepts of Web Application Security with OWASP and can place them in context.
  • You apply methods and tools from Web Application Security with OWASP to concrete scenarios.
  • You assess risks and choose suitable protective measures with clear reasoning.
  • You create a realistic implementation plan for your organisation.

Course outline

Module 1 Threat landscape and fundamentals of Web Application Security with OWASP
  • Classify relevant attack scenarios and protection goals
  • Key terms, standards and frameworks for Web Application Security with OWASP
  • Assess risks in your own business context
  • Clarify roles and responsibilities
Module 2 Focus areas: Web Application Security with OWASP
  • OWASP Top Ten
  • SQL Injection & XSS
  • Authentifizierung & Session-Management
  • Access Control & IDOR
  • Burp Suite
  • Security Headers & CSP
Module 3 Methods and approach for Web Application Security with OWASP
  • Proven process models step by step
  • Recognise typical mistakes and weaknesses
  • Select technical and organisational measures
  • Tools and checklists at a glance
Module 4 Hands-on exercises and case studies
  • Work through realistic scenarios in a lab environment
  • Prioritise and justify measures
  • Document and report results
  • Exchange experience on your own questions
Module 5 Transfer to everyday work
  • Draft an implementation plan for your organisation
  • Prepare metrics and evidence for audits
  • Communicate with management and business units
  • Further sources and next steps
Module 6 Transfer to your daily work
  • Exercise based on a realistic case
  • Typical mistakes and how to avoid them
  • Checklist and templates to take away
  • Open questions, outlook and resources for further learning

Prerequisites

Basic knowledge of IT and networks is helpful; no specific prior knowledge of Web Application Security with OWASP is required unless stated otherwise for the course. Basic knowledge of the topic is helpful.

Technical requirements

Your own laptop with a current browser; lab environment and exercise material are provided by us.

Dates & locations

For every location we suggest a date roughly four weeks ahead. Your preferred date is always possible.

  • Munich Tue, 15 December 2026 6 hrs Request
  • Salzburg Mon, 14 December 2026 6 hrs Request
  • Berlin Wed, 16 December 2026 6 hrs Request
  • Augsburg Thu, 10 December 2026 6 hrs Request
  • Hanover Tue, 15 December 2026 6 hrs Request
  • Bremen Thu, 10 December 2026 6 hrs Request
  • Stuttgart Tue, 15 December 2026 6 hrs Request
  • Kaiserslautern Mon, 14 December 2026 6 hrs Request
  • Online Wed, 16 December 2026 6 hrs Request

Frequently asked questions

Who is the Web Application Security with OWASP course for?

The course is for specialists and managers who are responsible for or contribute to information security in their organisation. We adapt examples and depth to your industry and prior knowledge, so beginners and experienced practitioners alike take away concrete results.

How hands-on is Web Application Security with OWASP?

Around half of the time is spent on exercises: you work on case studies, checklists and, where useful, in a lab environment we provide. We are happy to discuss your own questions and anonymised situations from your daily work. Legal advice is not part of the course.

How much does “Web Application Security with OWASP” cost?

The course costs a flat €949 plus VAT per participant – whether online or on-site. This includes 6 hours of live training with a trainer, course materials, a lab environment and a certificate of attendance.

Can I suggest my own date?

Yes. For every location we suggest a date roughly four weeks ahead. In the request form you can always describe your preferred date or period in free text – we check availability and get back to you within one working day.

Is the course online or on-site?

Both are possible: live online in a virtual classroom or on-site in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run the course exclusively for your team.

Can the course be tailored to our team?

Yes. Tailor-made courses cost approx. €4,500 more, depending on the topic and by arrangement. We agree content, examples and exercises with you in advance.

More courses in IT Security

All 26 courses in IT Security