This 1-day hands-on course is designed to introduce developers to the inner workings of the top web threats, how they are exploited, and how to write code that is secure against these threats. The course includes attack demonstrations, vulnerability exercises, examples of weak and vulnerable code, mitigation tactics, and developer-specific best practices. The course is mostly technical and not organizational. The goal of this course is to enable participants to: - Be aware of the top threats in Web development; - Know the tactics used to mitigate these threats; - Do not systematically allow security vulnerabilities to 'slip in' while developing a product/website.