Web Developer Security Checklist is a good collection of security issues to keep in mind when building web applications. Not much new in there, but it’s nice to have all of these conveniently gathered in one place. All items are grouped into a few sections – database, development, authentication, denial of services protection, web traffic, APIs, validation, cloud configuration, infrastructure, operation, etc.