OWASP Top Ten 2025 - A09 Security Logging & Alerting Failures

Part of Introduction To OWASP Top Ten Topic: Web Hacking

Counts towards

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, students will learn about the "A09:2025 Security Logging and Alerting Failures" vulnerability of the OWASP Top Ten and investigate the impact of insufficient logging and alerting.

They will use kibana to create data visualizations and query the data set to analyze SQL injection and LFI for a web application attack.

⏱ About 60 minutes
Counts towards: Certified Ethical Hacker (exam CEH) · CompTIA PenTest+ (exam PT0-003) · CompTIA SecAI+ (exam CY0-001) · OffSec Certified Professional (exam OSCP)

Roadmaps that use this lab

CompTIA PenTest+ (PT0-003) — step 4: Web application testing
Certified Ethical Hacker (CEH) — step 5: Web and application attacks
OffSec Certified Professional (OSCP) — step 4: Web attack chains
CompTIA SecAI+ (CY0-001) — step 3: Securing AI systems
Penetration Tester — career path — step 4: Web application attacks
Penetration Tester — career path — step 7: Certify it
AI Security Engineer — career path — step 3: The AI security certification