Protecting data hosted on a webserver presents unique challenges to be addressed. This session covers a variety of topics including the concepts of least privilege, identifying security risks, and the usage of network scanning tools. We will examine techniques for hardening MySQL, Apache, and discuss the role of vulnerability assessments in securing the network environment. Common risks associated with web applications as well as prevention techniques will be discussed.