Try:

Protect Your Endpoints: Modern Web API Security

Implement robust authentication and authorization. These talks cover OAuth 2.0, JWTs, rate limiting, and defending against common vulnerabilities like injection attacks and insecure configurations.

Matching moments

Q&A on graph databases, custom resolvers, and security
06:42 MIN

Q&A on graph databases, custom resolvers, and security

Putting the Graph In GraphQL With The Neo4j GraphQL Library

Securing and monitoring microfrontend communications
07:04 MIN

Securing and monitoring microfrontend communications

Interface Contracts in Microfrontend Architectures

Demo of a secure financial lending application
02:26 MIN

Demo of a secure financial lending application

This Machine Ends Data Breaches

Implementing authentication in gRPC services
02:16 MIN

Implementing authentication in gRPC services

Designing gRPC APIs - The things they don't tell you

Essential security measures for protecting public APIs
01:33 MIN

Essential security measures for protecting public APIs

Security Pitfalls for Software Engineers

Understanding common web and API vulnerability classes
12:11 MIN

Understanding common web and API vulnerability classes

Software Security 101: Secure Coding Basics

Exploring dynamic analysis security testing (DAST)
03:31 MIN

Exploring dynamic analysis security testing (DAST)

Why Security-First Development Helps You Ship Better Software Faster

The urgent need for API security from day one
02:04 MIN

The urgent need for API security from day one

Architecting API Security

Preventing XSS with the native browser Sanitizer API
02:27 MIN

Preventing XSS with the native browser Sanitizer API

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More

Balancing privacy and accessibility in new standards
02:42 MIN

Balancing privacy and accessibility in new standards

Creating compelling cross-device foldable experiences on the Web

Key findings from analyzing a billion API requests
03:16 MIN

Key findings from analyzing a billion API requests

Lessons learned from observing a billion API requests

Securing APIs against broken authentication flaws
05:12 MIN

Securing APIs against broken authentication flaws

Bullet-Proof APIs: The OWASP API Security Top Ten

Protecting sensitive business flows from API abuse
01:29 MIN

Protecting sensitive business flows from API abuse

Bullet-Proof APIs: The OWASP API Security Top Ten

Securing the API with authentication and authorization
03:27 MIN

Securing the API with authentication and authorization

Meet Your New BFF: Backend to Frontend without the Duct Tape

Securing APIs with JWT, RBAC, and CORS
02:36 MIN

Securing APIs with JWT, RBAC, and CORS

API = Some REST and HTTP, right? RIGHT?!

Key architectural takeaways for API security
02:00 MIN

Key architectural takeaways for API security

Architecting API Security

Designing a secure API using protected URL zones
01:25 MIN

Designing a secure API using protected URL zones

Full-stack role-based authorization in 45 minutes

A summary of APIs for multi-layered security
01:32 MIN

A summary of APIs for multi-layered security

No More Post-its: Boost your login security with APIs

Demo: Creating APIs and managing secrets
05:02 MIN

Demo: Creating APIs and managing secrets

Protector Of The Realm

Designing APIs for AI consumption and built-in security
03:39 MIN

Designing APIs for AI consumption and built-in security

Lessons learned from observing a billion API requests

Securing endpoints with authentication and authorization
02:51 MIN

Securing endpoints with authentication and authorization

Say goodbye to building boring APIs with Azure Data API Builder

Avoiding security misconfigurations with HTTP headers
02:48 MIN

Avoiding security misconfigurations with HTTP headers

Bullet-Proof APIs: The OWASP API Security Top Ten

Securing the API with authentication and authorization rules
03:17 MIN

Securing the API with authentication and authorization rules

Build and Deploy a Fullstack App with Open Source Tooling

Authenticating internal API-to-API calls
04:49 MIN

Authenticating internal API-to-API calls

Architecting API Security

Focusing on secure architecture over just code
01:20 MIN

Focusing on secure architecture over just code

Architecting API Security

The need for standards and common pitfalls of REST
04:59 MIN

The need for standards and common pitfalls of REST

Awful APIs: A History Lesson in Industry Mistakes and Mishaps

Ensuring data security with an API and strict privacy
01:09 MIN

Ensuring data security with an API and strict privacy

Secure and Private AI - DeepMask

Essential web security best practices beyond SPAs
03:30 MIN

Essential web security best practices beyond SPAs

A Primer in Single Page Application Security (Angular, React, Vue.js)

Defending against unsafe consumption of third-party APIs
01:04 MIN

Defending against unsafe consumption of third-party APIs

Bullet-Proof APIs: The OWASP API Security Top Ten

Essential manual security practices for your pipeline
06:44 MIN

Essential manual security practices for your pipeline

Securing Your Web Application Pipeline From Intruders

Securing third-party API calls using OAuth federation
01:10 MIN

Securing third-party API calls using OAuth federation

Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue

The importance of proper API inventory management
01:10 MIN

The importance of proper API inventory management

Bullet-Proof APIs: The OWASP API Security Top Ten

Sanitizing user input and accessing device contacts
08:44 MIN

Sanitizing user input and accessing device contacts

Web APIs you might not know about

Securing the GraphQL API with authentication providers
04:45 MIN

Securing the GraphQL API with authentication providers

40 Minutes to Build a Serverless COVID-19 REST and GraphQL APIs

A seven-step guide to securing modern web apps
06:37 MIN

A seven-step guide to securing modern web apps

Full-stack role-based authorization in 45 minutes

Enforcing broken function level authorization
00:55 MIN

Enforcing broken function level authorization

Bullet-Proof APIs: The OWASP API Security Top Ten

Matching Videos

Architecting API Security
47:34

Architecting API Security

Philippe De Ryck

Security in modern Web Applications - OWASP to the rescue!
26:59

Security in modern Web Applications - OWASP to the rescue!

Jakub Andrzejewski

The Resilience of the World Wide Web
26:51

The Resilience of the World Wide Web

Niels Leenheer

Secure and Accessible Login Systems - Ramona Schwering
24:39

Secure and Accessible Login Systems - Ramona Schwering

Ramona Schwering

Passwordless future: WebAuthn and Passkeys in practice
32:32

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?
27:36

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?

Tino Sokic

Let’s write an exploit using AI
21:01

Let’s write an exploit using AI

Julian Totzek-Hallhuber

Security Blindspots and How to Learn About Them - Anna Oliveira
26:28

Security Blindspots and How to Learn About Them - Anna Oliveira

Anna Oliveira

Bullet-Proof APIs: The OWASP API Security Top Ten
25:46

Bullet-Proof APIs: The OWASP API Security Top Ten

Christian Wenz

Answering the Million Dollar Question: Why did I Break Production?
29:38

Answering the Million Dollar Question: Why did I Break Production?

Luís Ventura

A Primer in Single Page Application Security (Angular, React, Vue.js)
36:39

A Primer in Single Page Application Security (Angular, React, Vue.js)

Thomas Konrad

The attacker's footprint
2:08:06

The attacker's footprint

Antonio de Mello & Amine Abed

Full-stack role-based authorization in 45 minutes
43:12

Full-stack role-based authorization in 45 minutes

Bartosz Pietrucha

Project Fugu: Extending the web
58:12

Project Fugu: Extending the web

Lucien Immink

Say goodbye to building boring APIs with Azure Data API Builder
30:01

Say goodbye to building boring APIs with Azure Data API Builder

Sander ten Brinke

Possibilities with Web Capabilities
27:05

Possibilities with Web Capabilities

Rowdy Rabouw

Project Fugu: Progressive Web Apps, Superpowered
45:20

Project Fugu: Progressive Web Apps, Superpowered

Christian Liebel

WeAreDevelopers LIVE – Guten TAG, Web Standards, AI and more
1:05:27

WeAreDevelopers LIVE – Guten TAG, Web Standards, AI and more

Chris Heilmann, Daniel Cranney & Christian Liebel

Lessons learned from observing a billion API requests
23:47

Lessons learned from observing a billion API requests

Pratim Bhosale

Web APIs you might not know about
43:53

Web APIs you might not know about

Sasha Shynkevich

New Browser APIs, End of React Create App, Smuggling Data in Emoji and more with Rowdy Rabouw
1:13:35

New Browser APIs, End of React Create App, Smuggling Data in Emoji and more with Rowdy Rabouw

Chris Heilmann & Daniel Cranney & Rowdy Rabouw

It's a (testing) trap! - Common testing pitfalls and how to solve them
24:19

It's a (testing) trap! - Common testing pitfalls and how to solve them

Ramona Schwering

WeAreDevelopers LIVE: What's happening to React?, All-in-one editors, Fireships and Firebases & more
47:53

WeAreDevelopers LIVE: What's happening to React?, All-in-one editors, Fireships and Firebases & more

Chris Heilmann & Daniel Cranney & Tejas Kumar

No More Post-its: Boost your login security with APIs
16:05

No More Post-its: Boost your login security with APIs

Alvaro Navarro

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking
56:03

WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking

Chris Heilmann & Daniel Cranney & Ramona Schwering

Improving Developer Happiness with GitOps
42:29

Improving Developer Happiness with GitOps

Lars Hesel Christensen & Basil Brunner

API = Some REST and HTTP, right? RIGHT?!
27:25

API = Some REST and HTTP, right? RIGHT?!

Rustam Mehmandarov

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR
40:38

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR

Anna Bacher

WeAreDevelopers LIVE - Should We Respect LLMs? Is Rust Taking Over? Developers as Content Creators and more
1:06:52

WeAreDevelopers LIVE - Should We Respect LLMs? Is Rust Taking Over? Developers as Content Creators and more

Chris Heilmann, Daniel Cranney & Francesco Ciulla

Stop Using Node.js Like It’s 2020! - Alfonso Graziano
27:11

Stop Using Node.js Like It’s 2020! - Alfonso Graziano

Alfonso Graziano

WeAreDevelopers LIVE – AI vs the Web & AI in Browsers
53:46

WeAreDevelopers LIVE – AI vs the Web & AI in Browsers

Chris Heilmann, Daniel Cranney & Raymond Camden

Friend or Foe? TypeScript Security Fallacies
27:41

Friend or Foe? TypeScript Security Fallacies

Liran Tal

1, 2, 3... Fastify!
42:08

1, 2, 3... Fastify!

Matteo Collina

Cross Site Scripting is yesterday's news, isn't it?
30:54

Cross Site Scripting is yesterday's news, isn't it?

Martina Kraus

What The Hack is Web App Sec?
24:01

What The Hack is Web App Sec?

Jackie

WeAreDevelopers LIVE - 11ty and a11y
1:05:26

WeAreDevelopers LIVE - 11ty and a11y

Chris Heilmann, Daniel Cranney & Kitty Giraudel