Skip to content

API Security and Web Application Defence

APIs now power mobile banking, government portals and integrated business platforms across the continent, and attackers increasingly target them directly. This course focuses on securing the interfaces and web applications that expose organisational data and services. Participants learn to identify weaknesses and apply layered defences using practical, hands on examples.

Ready to book? Secure your place on this programme.

Register for this course

What you will be able to do

  • Identify the most common web application and API vulnerabilities in real systems.
  • Apply authentication, authorisation and rate limiting controls to API endpoints.
  • Validate and sanitise input to prevent injection and abuse.
  • Configure web application firewalls and gateways for layered protection.
  • Test applications and APIs for weaknesses before they reach production.
  • Design logging and monitoring that detects abnormal application behaviour.

Course outline

  1. 01Web and API Attack Surface
  2. 02Common Vulnerabilities and Abuse Patterns
  3. 03Authentication and Authorisation for APIs
  4. 04Input Validation and Injection Defence
  5. 05Gateways, Firewalls and Rate Limiting
  6. 06Testing Applications and APIs
  7. 07Logging and Anomaly Detection
  8. 08Building Defence in Depth

Who should attend

Web and backend developers, application security specialists, integration engineers and technical leads responsible for online services.

Dates, venues and fees

DatesVenueDaysFeeCalendarRegister
28 to 30 Sep 2026Online3US$900Closed
21 to 23 Oct 2026Johannesburg3R13,000Register
26 to 28 Oct 2026Cape Town3R13,000Register
27 to 29 Oct 2026Durban3R13,000Register
28 to 30 Oct 2026Pretoria3R13,000Register
2 to 4 Nov 2026Windhoek3US$1,500Register
3 to 5 Nov 2026Gaborone3US$1,500Register
4 to 6 Nov 2026Maseru3US$1,500Register
9 to 11 Nov 2026Mbabane3US$1,500Register
10 to 12 Nov 2026Lusaka3US$1,500Register
11 to 13 Nov 2026Harare3US$1,500Register
16 to 18 Nov 2026Lilongwe3US$1,500Register
17 to 19 Nov 2026Blantyre3US$1,500Register
18 to 20 Nov 2026Mozambique3US$1,500Register
23 to 25 Nov 2026Nairobi3US$1,500Register
24 to 26 Nov 2026Dar es Salaam3US$1,500Register
25 to 27 Nov 2026Kigali3US$1,500Register
30 Nov to 2 Dec 2026Kampala3US$1,500Register
1 to 3 Dec 2026Accra3US$1,500Register
2 to 4 Dec 2026Lagos3US$1,500Register
7 to 9 Dec 2026Cairo3US$1,500Register
8 to 10 Dec 2026Mauritius3US$1,500Register
9 to 11 Dec 2026Dubai3US$1,500Register

Fees are per delegate. South African venues are priced in rand; other locations and online in US dollars. Fees exclude 15% VAT where applicable. Group bookings of three or more delegates from the same organisation qualify for a reduced rate; contact us for a quotation.

Related courses in Data, Digital and Cyber Security

Data, Digital and Cyber Security

Cyber Security Fundamentals for Business Teams

Most breaches begin with an ordinary employee making a reasonable decision on incomplete information.

Next session
29 Sep to 1 Oct 2026
Venue
Mbabane
3 day programme
FromR13,000
Data, Digital and Cyber SecurityNew

Artificial Intelligence for Business Managers

Artificial intelligence has moved from novelty to something managers are expected to have an opinion on.

Next session
29 Sep to 1 Oct 2026
Venue
Maseru
3 day programme
FromR13,000
See all Data, Digital and Cyber Security courses