Application Security
OWASP, APIs, auth flaws, and secure remediation for web apps.
- Roadmap level
- L9 Web Application Security →Stage: Offense & Defense
- Learning path
- Open path →
Learn · specialization explorer
11 focus areas — each links to the authoritative course and roadmap level. This is not a second topic dump; start learning from the course, orient with the roadmap.
One graph links courses → paths → career roles → assigned labs. Roadmap levels are the progression spine; Topics is a searchable index into that spine — not a second curriculum.
Next coverage (modules inside existing courses, not 13 new catalogs): Active Directory Security · Cloud Security Engineering · Malware Analysis & Reverse Engineering · Threat Intelligence & Detection Engineering · DevSecOps & Software Supply Chain · IoT, OT & ICS Security · Agentic AI Security — Advanced Track. Agentic AI is advanced-only.
OWASP, APIs, auth flaws, and secure remediation for web apps.
Packets, segmentation, firewalls, and network assessment tradecraft.
IAM, misconfigs, containers, and cloud logging across major providers.
Android/iOS analysis, traffic intercept, and MASVS-aligned testing.
SIEM, triage, detection engineering, and MITRE-mapped investigations.
Evidence handling, disk/memory/network forensics, and IR documentation.
Safe lab workflow, static/dynamic analysis, and YARA-driven detection.
Prompt injection, RAG risks, and defenses for LLM-powered apps.
Multi-agent architectures, tool-calling risks, agent permissions, isolated red-team sims — advanced specialization, not a beginner hacking course.
Governance, risk, compliance frameworks, and auditable control mapping.
Embedded/firmware risks, ICS/SCADA context, and OT segmentation.