# Security

This topic describes Angular's built-in protections against common web-application vulnerabilities and attacks such as cross-site scripting attacks. It doesn't cover application-level security, such as authentication and authorization.

Visit the following resources to learn more:

- [@official@Security](https://angular.dev/best-practices/security)
- [@official@Open Web Application Security Project (OWASP)](https://owasp.org/)