Security for Rails Developers (PRE-SALE)

This course is still in the works, but you can pre-purchase it to show support and put pressure on me to finish it ASAP. If you don't happen to like it once it is released, a full, no questions asked refund will be available.
Use the code "PRESALE" during the checkout to receive a 35% discount.

Are you a Rails developer eager to elevate your security skills and safeguard your applications against cyber threats? This Rails Security course is designed specifically for developers like you who aim to build robust, secure Rails applications!

Rails has great defaults for security, but a framework can't prevent all security vulnerabilities and there are APIs you might not think are dangerous to use with user supplied data.
The course covers authentication, authorization and safeguarding against common vulnerabilities like SQL injection, Server-side Request Forgery, business logic flaws and Cross-Site Scripting attacks.
You will learn practical strategies to write more secure code and prevent vulnerabilities in your applications.

What is covered in the course?

The current list of topics covered is below, but this list might change.

• Authentication
• Authorization
• SQL Injection
• Cross-Site Scripting (XSS)
• Command Injection
• Path traversal
• Information Disclosure
• Server side request forgery(SSRF)
• File uploads
• Business logic vulnerabilities
• Unsafe reflection
• Logging and monitoring
• Secure development process
• Working Securely

What is the format of the course?

You will get a downloadable HTML site that you can use without an internet connection. The content consists of text and video material and some of the topics has challenges too.

About me

I am an OSCP-certified penetration tester and a Rails developer with more than a decade experience. I regularly penetration test Rails applications(and non-Rails ones too) and I'd like to share how I think a Rails application should be secured.