Resources

Open Web Application Security Project (OWASP)

OWASP Top 10 - OWASP keeps a top 10 list of the most threatening risks to web applications.

ZAP - Zed Attack Proxy (ZAP) is proxy tool for testing web applications

Blogs I follow

PaulDotCom Security Weekly
The Falcon's View
PortSwigger Web Security Blog
SANS Internet Storm Center
SANS Securing the Human
Social-Engineer.org
TrendLabs | Malware Blog
Webroot Threat Blog

Denver Local Resources

Colorado Restaurant Consulting
LazerDesigns