Web & Application Security

Cross-site request forgery (CSRF) is a web attack that tricks your browser into sending an unwanted request to a site where you’re already …

Cross-site scripting (XSS) is a web vulnerability that lets an attacker inject malicious scripts into a legitimate website, which then run in the …

SQL injection (SQLi) is a web attack where a hacker sneaks malicious database commands into a website’s input fields — like a login box or …

A web application firewall (WAF) is a security layer that sits in front of a website or web app, inspecting incoming traffic and blocking malicious …