OpenCourser brand icon
Sign in
We may earn an affiliate commission when you visit our partners.
Course image
Course image
Coursera logo

OWASP Top 10 - Risks 6-10

John Wagnon

In this course, we will examine Vulnerable and Outdated Components, Identification and Authentication Failures, Software and Data Integrity Failures, Security Logging and Monitoring Failures, and Server-Side Request Forgery (SSRF). We’ll use demos, graphics and real-life examples to help you understand the details of each of these risks.

Enroll now

Here's a deal for you

Save money when you learn with a deal that may be relevant to this course.
All coupon codes, vouchers, and discounts are applied automatically unless otherwise noted.
Valid until March 12, 2027
Save 40% Off 3 Months
Access thousands of top-rated learning programs with a Coursera Plus monthly subscription and take 40% off 3 months for a limited time.
Take
40%
off
Get offer

What's inside

Syllabus

Vulnerable and Outdated Components
Identification and Authentication Failures
Software and Data Integrity Failures
Read more

Traffic lights

Read about what's good
what should give you pause
and possible dealbreakers
Helps learners identify and understand Vulnerable and Outdated Components, Identification and Authentication Failures, Software and Data Integrity Failures, Security Logging and Monitoring Failures, and Server-Side Request Forgery (SSRF)
Builds a strong foundation for beginners in the world of industry standard security risks
Taught by John Wagnon, an instructor recognized worldwide for their work with security
Strengthens an existing foundation for intermediate learners in the world of industry standard security risks
Explores Vulnerable and Outdated Components, Identification and Authentication Failures, Software and Data Integrity Failures, Security Logging and Monitoring Failures, and Server-Side Request Forgery (SSRF), all of which are highly relevant to industry
Part of a series of courses, indicating comprehensiveness and detail

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Reviews summary

Practical insights into owasp top 10 risks

According to students, this course provides a clear and concise overview of OWASP Top 10 Risks 6-10. Learners frequently highlight the highly relevant content and the effectiveness of the practical demonstrations and real-life examples in explaining complex concepts like SSRF and authentication failures. Many find it an excellent foundational course for understanding specific vulnerabilities. However, some experienced security professionals indicate it may be less suitable for advanced learners seeking deeper technical dives or extensive hands-on exploitation labs, suggesting it serves better as a solid introduction or refresher rather than an in-depth advanced training. Overall, the course is praised for its practical application and instructor's clarity.
Highly relevant to current security practices for specific OWASP risks.
"Highly recommend this course! The content is highly relevant to current security practices, especially the part on Vulnerable and Outdated Components."
"As a cybersecurity professional, this course was exactly what I needed. It focused on the practical aspects of identifying and understanding the implications."
"The course delivers on its promise to cover OWASP Top 10 Risks 6-10. It covers a specific set of topics well. It's concise yet comprehensive."
"Good overview of the second half of OWASP Top 10. The module on Identification and Authentication Failures was very informative. Still, a strong starting point."
Features clear, concise explanations delivered by a knowledgeable instructor.
"The instructor broke down complex concepts... with incredibly clear demos. Highly recommend for anyone in cybersecurity looking to deepen their understanding."
"Excellent course! The detailed explanations of Software and Data Integrity Failures were top-notch. The instructor provides clear, concise explanations."
"The instructor is knowledgeable and presents the material clearly. The instructor's expertise was evident. Highly recommended for its clarity."
"Excellent and focused course. The instructor provides clear, concise explanations and the real-world examples are very illustrative."
Provides highly effective practical demonstrations and real-life examples.
"The instructor broke down complex concepts like SSRF and IDOR with incredibly clear demos. The real-life examples made it easy to grasp."
"Absolutely fantastic! The real-life examples made it easy to grasp the practical implications. I especially appreciated the hands-on approach."
"The demos are a strong point, making the concepts tangible. My only minor critique is that some explanations could have been more elaborate."
"Valuable content for anyone working in web security. The course does a good job explaining each risk with good visual aids. The demos are good."
Some desire more interactive exercises and deeper hands-on application.
"The content was too theoretical and didn't provide enough hands-on exercises. I was expecting more practical labs to apply what I learned."
"Demos were helpful, though sometimes I wished for a bit more depth in certain areas, particularly around advanced mitigation strategies."
"I think a bit more interactive exercises would have made it perfect, but still, I learned a lot."
"Some parts felt a bit rushed, and the demos, while present, weren't always as interactive or deep as I hoped."
Ideal for foundational understanding, less for deep dives or advanced practitioners.
"Found this course to be a bit basic for my level. I was hoping for more advanced techniques and hands-on challenges beyond just identifying issues."
"If you're a complete beginner, it might be okay, but for experienced security engineers, it might not offer much new. It felt more like a refresher."
"For someone new to these specific risks, it provides a decent introduction, but intermediate learners might find it a bit superficial."
"The course is okay, but not what I expected. I was hoping for more in-depth technical dives and less of a general overview."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in OWASP Top 10 - Risks 6-10 with these activities:
Form a study group with classmates to discuss course concepts and assignments
Foster collaboration and knowledge sharing among students. This will enhance understanding of course material and provide multiple perspectives on security challenges and solutions.
Show steps
  • Reach out to classmates to form a study group
  • Schedule regular meetings to discuss course material and work on assignments together
Attend webinars or conferences on security best practices
Expand knowledge and connect with professionals in the field of security. This will provide valuable insights and perspectives on current trends and best practices.
Browse courses on Security Best Practices
Show steps
  • Research upcoming webinars or conferences on security best practices
  • Register and attend the event(s)
Review 'Security Engineering' by Ross J. Anderson
Provide a solid foundational understanding of security engineering principles and practices, emphasizing vulnerability assessment and mitigation, which are key concepts in this course.
View Security Engineering and Tobias on Locks Two... on Amazon
Show steps
  • Read the book thoroughly
  • Annotate the book to highlight key concepts
  • Summarize each chapter in your own words
Five other activities
Expand to see all activities and additional details
Show all eight activities
Follow tutorials on web application security testing tools
Develop practical skills in using tools for web application security testing. This will complement the course's emphasis on security monitoring and vulnerability assessment.
Browse courses on Web Application Security
Show steps
  • Identify relevant tutorials on web application security testing tools
  • Follow the tutorials and practice using the tools
Practice identifying common security vulnerabilities
Reinforce understanding of how to recognize and address vulnerabilities. This will enhance skills in detecting and mitigating potential threats discussed in the course.
Show steps
  • Visit websites like
Create a poster or infographic on best practices for secure software development
Solidify understanding of best practices in secure software development. This will promote the ability to design and implement secure systems, a crucial aspect covered in the course.
Browse courses on Software Development
Show steps
  • Research best practices for secure software development
  • Design a visual representation of these practices (e.g., poster or infographic)
Participate in a workshop on security incident response
Gain hands-on experience in responding to security incidents. This will enhance skills in mitigating risks and managing security breaches, topics extensively covered in the course.
Browse courses on Security Incident Response
Show steps
  • Identify and register for a workshop on security incident response
  • Attend the workshop and actively participate in the exercises
Volunteer as a security tester for a non-profit organization
Provide practical experience in applying security principles and techniques. This will reinforce course concepts and foster a sense of real-world application.
Browse courses on Security Testing
Show steps
  • Identify non-profit organizations that need security testing assistance
  • Contact the organizations and offer your services

Career center

Learners who complete OWASP Top 10 - Risks 6-10 will develop knowledge and skills that may be useful to these careers:
Security Architect
A Security Architect designs and implements security solutions for an organization. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Security Architect
Chief Information Security Officer (CISO)
A Chief Information Security Officer (CISO) is responsible for overseeing an organization's information security program. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Chief Information Security Officer (CISO)
Penetration Tester
A Penetration Tester is responsible for identifying vulnerabilities in an organization's computer systems and networks. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Penetration Tester
Security Researcher
A Security Researcher is responsible for identifying and researching vulnerabilities in computer systems and networks. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Security Researcher
Information Security Manager
An Information Security Manager is responsible for managing an organization's information security program. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Information Security Manager
Security Operations Center (SOC) Analyst
A Security Operations Center (SOC) Analyst is responsible for monitoring and responding to security incidents. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Security Operations Center (SOC) Analyst
Security Consultant
A Security Consultant provides advice and guidance to organizations on how to improve their security posture. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Security Consultant
Cybersecurity Analyst
A Cybersecurity Analyst is responsible for protecting an organization's computer systems and networks from cyberattacks. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Cybersecurity Analyst
Systems Administrator
A Systems Administrator is responsible for managing and maintaining computer systems and networks. This course may be useful for someone in this role because it covers a range of topics related to system security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Systems Administrator
Security Engineer
A Security Engineer designs, implements, and maintains security measures to protect an organization's computer systems and networks. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Security Engineer
Software Developer
A Software Developer designs, develops, and maintains software applications. This course may be useful for someone in this role because it covers a range of topics related to software security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Software Developer
IT Auditor
An IT Auditor is responsible for evaluating an organization's computer systems and networks to ensure that they are secure and compliant with regulations. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for IT Auditor
Risk Manager
A Risk Manager is responsible for identifying and assessing risks to an organization. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Risk Manager
Information Security Analyst
An Information Security Analyst is responsible for protecting an organization's computer systems and networks from cyberattacks. This course may be useful for someone in this role because it covers a range of topics related to information security, including vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Information Security Analyst
Network Engineer
A Network Engineer designs, implements, and maintains computer networks. This course may be useful for someone in this role because it covers a range of topics related to network security, including vulnerable and outdated components, identification and authentication failures, and server-side request forgery (SSRF).
See salaries and explore the career path for Network Engineer

Reading list

We've selected six books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in OWASP Top 10 - Risks 6-10.
Cover image
Automated Threat Handbook
Save
The definitive guide to the OWASP Top 10 web application security risks, providing detailed information on each risk and how to mitigate it.
Automated Threat Handbook
Paperback
$$
Cover image
Ethical Hacking and Web Hacking Handbook and Study...
Save
A comprehensive guide to web application security, covering topics such as vulnerable components, authentication failures, and data integrity failures.
Ethical Hacking and Web Hacking Handbook and Study...
Paperback
Check
Ethical Hacking and Web Hacking Handbook and Study...
Kindle Edition
Check
Cover image
Secure Coding
Save
A practical guide to secure coding, covering topics such as input validation, error handling, and memory management.
Secure Coding: Principles and Practices
Paperback
$$
Cover image
The Art of Deception
Save
A fascinating and informative look at the human element of security, covering topics such as social engineering, phishing, and deception.
The Art of Deception: Controlling the Human Element...
Hardcover
$$
The Art of Deception: Controlling the Human Element...
Kindle Edition
$$
Cover image
The Hacker Playbook 3
Save
A practical guide to penetration testing, covering topics such as reconnaissance, exploitation, and reporting.
The Hacker Playbook 3: Practical Guide To...
Paperback
$$
The Hacker Playbook 3: Practical Guide To...
Kindle Edition
$$
Cover image
Techniques for Designing and Analyzing Algorithms
Save
A comprehensive guide to cryptography, covering topics such as encryption, decryption, and digital signatures.
Techniques for Designing and Analyzing Algorithms...
Kindle Edition
$$$$

Share

Help others find this course page by sharing it with your friends and followers:
Facebook
LinkedIn
Reddit
X
Link
Email

Similar courses

Similar courses are unavailable at this time. Please try again later.

Coursera Buyer Protection & Guarantee

Verified partner policies & purchase protections

Accredited University Partner
Free Trial & Audit

7-Day Free Trial & Free Audit

7-day free trial on monthly Coursera Plus subscriptions; free audit option available on most individual courses to explore video lectures and readings at no charge.

Return & Refund Policy

14-Day Refund Guarantee

14-day refund window on annual Coursera Plus subscriptions and single-course purchases prior to certificate issuance. Monthly subscriptions do not offer refunds once billed.

Buyer Protections

Verified Academic & Industry Partner

Accredited university and industry certifications (e.g. Stanford, Google, IBM, Yale), secure SSL payment processing, and verifiable digital certificate links.

Key Purchase Protections
14-day refund window on annual Coursera Plus and single courses
7-day free trial on monthly Coursera Plus subscriptions
Free course audit option for lectures and readings
Verified certificates from top universities & companies
OpenCourser Verified Partner Policy details last reviewed: 2026-10-22
Course image
Level
Intermediate
Via
Coursera
Institution
Infosec
Instructor
John Wagnon
Language
English
This course belongs to a collection called OWASP Top 10 - 2021. It's comprised of three courses:
  1. OWASP Top 10 - Welcome and Risks 1-5
  2. OWASP Top 10 - Risks 6-10 (viewing)
  3. Previous OWASP Risks
Traffic lights
Read about what's good
what should give you pause
and possible dealbreakers
Helps learners identify and understand Vulnerable and Outdated Components, Identification and Authentication Failures, Software and Data Integrity Failures, Security Logging and Monitoring Failures, and Server-Side Request Forgery (SSRF)
Builds a strong foundation for beginners in the world of industry standard security risks
Taught by John Wagnon, an instructor recognized worldwide for their work with security
Strengthens an existing foundation for intermediate learners in the world of industry standard security risks
Explores Vulnerable and Outdated Components, Identification and Authentication Failures, Software and Data Integrity Failures, Security Logging and Monitoring Failures, and Server-Side Request Forgery (SSRF), all of which are highly relevant to industry
Part of a series of courses, indicating comprehensiveness and detail
Share this
Share to help others discover this course.
Facebook LinkedIn X Reddit Link Email
Begin learning today
Enroll now to gain full access to OWASP Top 10 - Risks 6-10.
Enroll now
Save for later
Add this course to your list. Find it anytime.
Save
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser