Application Security & DevSecOps — Study Course

The official preparation course for the Application Security & DevSecOps certification: structured modules, worked examples and exam-focused practice.

Key facts

• Course price: $195 (one-time payment)
• Field: Cybersecurity & Information Security
• Prepares for: Application Security & DevSecOps
• 7 modules · 24 lessons · about 6 hours of lessons
• Self-paced, online, illustrated lessons

Course outline

1. Module 1: Application Security Fundamentals — Establishes the core concepts of application security, the threat landscape, and the shift-left philosophy that underpins DevSecOps.
   • Why Application Security Matters
   • The OWASP Top 10 Deep Dive
   • Secure Software Development Lifecycle (SSDLC)
   • Threat Modeling with STRIDE and PASTA
2. Module 2: Secure Coding and Common Vulnerability Patterns — Covers secure coding principles and the most impactful vulnerability classes developers must understand to write secure software.
   • Secure Coding Principles and Standards
   • Injection Attacks and Prevention
   • Cross-Site Scripting (XSS) and CSRF
   • Authentication, Authorisation, and Session Management Flaws
3. Module 3: Security Testing — SAST, DAST, and SCA — Teaches the three primary automated security testing disciplines and how they complement manual review in a comprehensive testing programme.
   • Static Application Security Testing (SAST)
   • Dynamic Application Security Testing (DAST)
   • Software Composition Analysis (SCA) and Dependency Security
   • Interactive Application Security Testing (IAST) and Penetration Testing
4. Module 4: Secrets Management and Supply-Chain Security — Addresses how to protect secrets and cryptographic material and how to secure the software supply chain against dependency and build-pipeline attacks.
   • Secrets Management — Principles and Tooling
   • Software Supply Chain Security and SBOMs
   • Container and Infrastructure-as-Code Security
5. Module 5: DevSecOps — Embedding Security into CI/CD Pipelines — Covers the DevSecOps philosophy, toolchain integration, and how to build security gates into modern CI/CD pipelines without blocking delivery velocity.
   • DevSecOps Principles and Culture
   • Building Security Gates into CI/CD Pipelines
   • Security Monitoring, Logging, and Incident Response in DevSecOps
6. Module 6: Advanced Topics — API Security, Cryptography, and Zero Trust in Apps — Covers API-specific security risks, correct cryptography application, and how Zero Trust principles apply to application architecture.
   • API Security — REST, GraphQL, and the API Security Top 10
   • Applied Cryptography for Application Developers
   • Zero Trust Application Architecture
7. Module 7: Exam Readiness — Concepts Review and Strategy — Consolidates the entire course into a structured review, explains how professional application security and DevSecOps exams are structured, and provides study and test-taking strategies.
   • Key Concepts Rapid Review
   • Exam Structure and Certification Landscape
   • Practice Strategy and Final Preparation