web.dev/security
Unknown
web.dev/security is Google's resource hub with tutorials, guides, and best-practice references for securing web applications, from HTTPS and security headers to authentication, permissions, and common vulnerabilities.
More resources on Web Security
owasp.org
OWASP.org is the official site of the Open Web Application Security Project, a nonprofit dedicated to improving software security. It offers extensive learning resources—such as the OWASP Top 10, security guides and cheat sheets, tools, and community projects—to help developers secure web applications.
Mozilla Observatory
Scan site security headers
OWASP Secure Coding Practices
Learn essential web-security practices with OWASP's Secure Coding course. Build robust, secure applications following industry standards.
Web Security for Developers
Web Security for Developers - A book resource
Web Application Security
This course covers essential web security concepts and secure coding practices. You’ll learn to identify common vulnerabilities, implement protection techniques, and leverage Microsoft Copilot to detect and fix security issues in web applications. By the end of this program, you will be able to… Define common web application vulnerabilities and principles of secure coding. Explain the concepts and impacts of SQL injection, XSS, CSRF, input validation techniques, and best practices for authentication and authorization. Describe the importance of output encoding, sanitization, secure data storage, and transmission. Enhance the security of web applications with Microsoft Copilot to detect vulnerabilities, fix issues, and implement secure coding practices.