Protect apps, servers and data
Web Security & Server Hardening
Find and fix the weaknesses attackers look for — from the OWASP Top 10 in your code to firewalls, WAF rules and monitoring on your servers.
- Duration
- 6 weeks
- Sessions
- 12
- Total hours
- 36
- Schedule
- Batch dates on request
- Venue
- Magnetic ICT, Gulshan 2, Dhaka
- Certification
- Certificate of completion
Course outline
Module 1 — Security foundations
- Threat modelling for web products
- The OWASP Top 10 in practice
- Secure defaults and least privilege
Module 2 — Application security
- Authentication, sessions and MFA
- Input validation and injection
- Dependency and secret scanning
Module 3 — Server hardening
- SSH, firewall and Fail2ban
- ModSecurity with the OWASP Core Rule Set
- Patching and configuration reviews
Module 4 — Edge protection
- WAF rules, rate limiting and bot mitigation
- DDoS basics
- SSL/TLS done right
Module 5 — Testing and response
- Running an authorised penetration test
- Writing a remediation report
- Malware clean-up and incident response
Module 6 — Final lab
- Harden and audit a deliberately vulnerable test server
Course fee
On request
Ask us for the next batch and fee
Enroll in this course
Reserve your seat in the upcoming batch — we'll confirm by phone.