Systematic analysis of vulnerabilities in web applications through automated scans and manual tests to identify security flaws such as SQL injection, XSS, CSRF, misconfigurations, and logic weaknesses. Includes OWASP methodologies, scanning tools, and validation techniques for HTTP/HTTPS-based applications.