Doesn't suit? No problem! You can return items for up to 30 days
You won't go wrong with a gift voucher. The gift recipient can choose anything from our offer.
Up to 30 days for returns
This book is a practical guide to web application security, from architecture, trust boundaries, and asset discovery to authentication, authorization, injection, XSS, CSRF, SSRF, file handling, and deserialization risks. It explains how vulnerabilities work, how to validate them safely, and how to prioritize findings by exploitability, impact, and business context.
You'll also cover REST and GraphQL APIs, microservices, WebSockets, third-party JavaScript, containers, Kubernetes, serverless platforms, and cloud permissions. Hands-on chapters address Burp Suite, OWASP ZAP, evidence collection, reproducible proofs of concept, logging, detection, incident response, and technical reporting.
Written for security testers, developers, architects, and defenders, the book connects application testing with threat modeling, secure SDLC practices, CI/CD automation, governance, and continuous improvement.
Hi! I'm Libroamiko, your book advisor.
How can I help you?