Every website on the Internet is somewhat vulnerable to security attacks. Web attacks refer to threats that target vulnerabilities in web-based applications The threats range from human errors to sophisticated attacks by coordinated cyber criminals. web attacks include SQL injection and cross-site scripting (XSS), cross-site request forgery (CSRF) attacks and parameter tampering. According to the Data Breach Investigations Report by Verizon, the primary motivation for cyber attackers is financial. Whether you run an eCommerce project or a simple small business website, the risk of a potential attack is there. Social Engineering Social engineering is a common threat vector mostly trick people into clicking on malicious click. The attacks like fishing are often combined with other threats such as malware cod injection and network attack.