Go (Golang) Application Security

The book "Go (Golang) Application Security" is a practical guide for developers who want to build reliable and secure applications in Go. Unlike many other languages, Go was initially designed with a focus on security and performance, however, even in such a language, typical vulnerabilities remain that need to be known and prevented.

The author of the book, Alexey Zakharov, is an experienced Go developer and information security specialist with 10 years of experience. He has systematized the most common threats and protection methods that every Go developer encounters.

Who is this book for?

• Go developers of any level (from Junior to Senior)
• DevOps engineers responsible for container and microservice security
• Architects designing secure systems in Go
• DevSecOps and pentest specialists

What will you learn from the book?

• Go Security Basics: how the memory model, goroutines, and channels work from a security perspective
• Web Application Vulnerabilities: SQL injection, XSS, CSRF, SSRF and protection against them in Go
• API Security: authentication (JWT, OAuth2), authorization, protecting REST and gRPC
• Encryption and Cryptography: working with crypto/tls, password hashing, data encryption
• Secure Memory Management: protection against buffer overflow, race conditions, goroutine leaks
• Dependency Security: vulnerability analysis in Go modules, updating dependencies
• CI/CD and DevSecOps: integrating vulnerability scanners, static code analysis (SAST), secure container builds
• Practical Cases: analysis of real vulnerabilities from CVE, writing secure code from scratch

Each chapter contains code examples, security checklists, and tool recommendations (gosec, govulncheck, OWASP ZAP, Semgrep). The book is written in a lively style, without excessive theory — only what is really needed in practice.

After reading, you will be able to independently conduct security audits of Go applications, implement protection at the development stage, and confidently answer security questions in interviews.

The book is suitable both for self-study and for use as a reference in everyday development.