What is Web security? Definition and explanations
Web security covers the protections of a browser-accessible site or application: transport encryption, session management, input validation, security headers, protection of forms and exposed APIs. It addresses the risks catalogued by OWASP — injection, broken access control, misconfiguration. It concerns the public surface, where anyone can knock.
In one sentence
Web security protects the public surface of a browser-accessible site or application.
We have a full page on this subject, with the detail, the use cases and how we approach it.
Web security