Mike Saunders has spent the last seven years as an incident handler, web app and network pen tester, and architect. Having seen the same failures over and over again is ready to share his knowledge with the community. This talk is intended for anyone who writes or analyzes web applications or who helps developers secure them.