Techno Webdev

C# and .NET Development · Cohort

Security Engineering for .NET APIs

Security without theater. You will run lightweight threat models, configure headers and CORS deliberately, and integrate scanning steps that developers will not disable out of frustration.

JPY 92,000 — informational only

5 weeks · 56 hours · Intermediate · Language: English · Certificate included

Visual treatment for Security Engineering for .NET APIs

What ships in the syllabus

  • STRIDE-lite worksheets with .NET examples
  • Secret scanning hooks in CI
  • Rate limiting and IP allowlists where appropriate
  • Dependency update cadence templates
  • Security review checklist for PRs

Outcomes we assess

  1. Produce a threat model for a sample finance API
  2. Enable baseline security headers with tests
  3. Draft an update policy stakeholders can agree on

Lead mentor

Avatar for Sanae Mori

Sanae Mori

AppSec partner for midsize SaaS; bilingual review notes.

Participant voices

STRIDE-lite worksheet is pinned in our wiki. Headers lab caught a CORS foot-gun immediately.

— Bea

FAQ for this track

We prepare you to work with vendors; we do not perform pentests.