iSAQB WEBSECWeb Security Training

  • 30 credit points toward CPSA-A

Fact sheet

Duration
2 days
Format
Live online
Language
German
Credit points
20 technical and 10 methodical

Price per seat

from€1,862plus VAT

Next date

19–21 Oct 2026Live onlinethe only date

In-house for your teamChoose a date
About the course

What this course is.

In WEBSEC you derive protective measures from the threats to your web application. You classify the assets worth protecting, weigh security against usability, build input validation and output escaping into the design, choose hashing, encryption and trust mechanisms, work through injection, DoS and man-in-the-middle attacks, and place a WAF and TLS around the running system.

WEBSEC has no exam of its own. Attending earns credit points toward CPSA-A admission; the certification itself is an assignment and an oral exam.

iSAQB curriculum
2020.1
Advanced Level
WEBSEC
Dates

Every scheduled date for this course.

1 date.

Group discount from 2 seats in one booking, applied automatically at checkout. The highest eligible discount applies.

October 2026

1 date

  • , Live online, German

    • Mon–Wed–

    CEST

    Format
    Live online
    Language
    German
    Your trainers
    To be announced
    Group discount
    Monthly Pick

    Current price €1,862

    Regular price €2,190Save €329

    per seat, plus VAT

    Seats: 5+ left

Prices are per seat and exclude VAT (value-added tax). Hours are in Central European Time (CET or CEST) unless a date says otherwise.

Looking for an in-house WEBSEC training for your team? Ask us.

Before you book

Is this the right course for you?

Who it's for

  • You design web applications that are reachable from the internet.
  • You justify security decisions in a review or an acceptance test.
  • You answer for the third-party code your system pulls in.
  • You choose the authentication and authorisation for your services.

Prerequisites

Recommended

The curriculum makes its requirements depend on what the training focuses on.

For a web focus it names basic knowledge of network communication, of web technologies such as HTML, CSS and JavaScript, and of building web applications.

Curriculum, 6 topics

What the course covers.

The topics follow the iSAQB WEBSEC curriculum 2020.1. Your trainer works through them live with the group.

  1. Analysis
  2. Secure design and development process
  3. Cryptography
  4. Web: Technical foundation
  5. Web: Known attacks and attack vectors
  6. Web: Security and infrastructure

After the course you can

  • Model threats and classify the assets worth protecting
  • Weigh security against usability and the business purpose
  • Design applications so input validation and output escaping stay simple
  • Choose a secure development process and place SAST, DAST and SCA in it
  • Select hashing, encryption and trust mechanisms for a given case
  • Design authentication and authorisation with OAuth, OIDC, SAML or JWT
  • Counter injection, DoS and man-in-the-middle attacks in the design
  • Place firewalls, a WAF and TLS around a web application

How the training works.

  1. Before the course

    Before the Albion WEBSEC course you receive the materials and either the joining details or the address of the venue.

  2. The course days

    The course days follow the same programme online and on site; the times are on the date you booked.

  3. After the course

    From 80 percent attendance you get the Albion certificate of participation; the credit points count toward CPSA-A admission.

After this course

Credit points, and the certificate you take home.

Certificate of participation

To receive it
At least 80% of the course time attended
The certificate, shown in English

Credit points

30 credit points toward CPSA-A

This course has no exam.

Technical
20 credit points
Methodical
10 credit points
Communicative
0 credit points

What you still need for CPSA-A

This course contributes 30 of the 70 credit points required. Your total across modules must include at least 10 points in each area.

You also need the CPSA-F (Foundation) certificate; the official rules cover the remaining eligibility and assessment requirements.

Official CPSA-A requirements

Why book with Albion.

Every promise here is one the Terms can be held to, on every course.

  • Verified digital certificate

    Every certificate Albion issues has a public verification page, and the certificate showroom shows a sample of each one.

    See the certificate showroom

  • Accredited trainers who work as architects

    Your trainers are accredited iSAQB trainers who work as architects, so the exercises come from systems they have built.

Related modules.

  1. You are here

    iSAQB WEBSEC Web Security Training

    Credit points from this course

    Technical
    20
    Methodical
    10
    Communicative
    0

    This course only. Your previous modules are not included.

  2. Explore related modules

    This list has 8 modules.

    CPSA-A requires 70 points, at least 10 in each area, plus the Foundation certificate.

Questions before you book.

Does WEBSEC have an exam of its own?

The Albion WEBSEC course has no exam and earns CPSA-A credit points. Certification involves an assignment and an oral exam assessed by experts appointed by the iSAQB, after all admission requirements have been met.

How many credit points does WEBSEC carry?

The Albion WEBSEC course carries 30 credit points under the iSAQB WEBSEC curriculum 2020.1: 20 in technical competence, 10 in methodical competence and none in communicative competence.

Do I need CPSA-F to attend WEBSEC?

The Albion WEBSEC course requires no CPSA-F certification. The iSAQB curriculum 2020.1 names basic knowledge of network communication, web technologies and web applications; CPSA-F is required only for CPSA-A admission.

What do I get for attending?

For the Albion WEBSEC course you receive the Albion certificate of participation from 80 percent attendance. It records that you attended and depends on no exam.

Does WEBSEC run differently online and on site?

The Albion WEBSEC course follows the same programme online and on site.

Is there a discount for several seats?

A group discount applies to several seats booked together for the Albion WEBSEC course. The date row and checkout show whether it applies and the minimum number of seats.

Is WEBSEC only about web applications?

The Albion WEBSEC course follows the iSAQB curriculum's focus on web applications. At the relevant points the curriculum also allows content on information systems or embedded systems.

What does the WEBSEC curriculum leave out?

The iSAQB WEBSEC curriculum leaves out organisational access control, structural measures, hardware attacks and a detailed discussion of the legal foundations. The Albion WEBSEC course works on design, process and infrastructure.

Your question is not here? Ask us

Next step

Ready to book?

One date, on 19–21 Oct 2026, from €1,862 plus VAT.

Choose a dateIn-house for your team