November 2024

New

Quests

Administrators can now see an overview of goal progress in a new Goal Report.

Quests - Assign by teams 

Administrators can now assign goals to teams within Quests. This now means admins can assign learning to all learners in their company or target it to specific teams. 

Quests - Configure learning modules 

Administrators can now control the different learning modules they want to enable for their learners. We provide the ability to toggle on/off Quests and Guided learning in the following ways: 

• Quests - Quests only experience 
• Legacy - Guided learning only experience 
• Hybrid (both toggled on) - Quests and Guided learning are shown (note, the Training ground is not available in this mode)

Quests - Report

Administrators can now track progress of Quests they have published. This new report enables you to quickly and easily understand how learners are progressing towards completing the objectives that you have assigned them.

The above features are available via closed preview - speak to your CSM to get access!

New Course Templates 

Risk-Based Security Testing Strategy
This Risk-Based Security Testing course provides learners with a comprehensive understanding of methodologies, tools, and best practices to effectively assess and enhance the security posture of software systems. Learners will explore the core concepts of risk assessment, test planning, test design, execution, and reporting. This course is suitable for engineers of all stripes, including Test Engineers and QA Engineers, as well as Engineering Managers.

OAuth 2.0 Security
OAuth 2.0 is a widely used framework for securing access to APIs. But due to its complexity, many developers struggle to use and integrate OAuth 2.0 securely. In this course, we introduce the core concepts of OAuth 2.0 and investigate the currently recommended flows. We also briefly discuss deprecated flows and look at common security pitfalls and misconceptions. This course is suitable for Engineers, Engineering Managers, and Architects.

Security Awareness 101
This course contains 7 modules covering Application Security Concepts, Web Application Security, Threat Modeling, Foundations of Software Security, Security Requirements, Open Source Software, and AI Usage and Awareness. This is a conceptual course using existing videos, guidelines, and a small number of pseudocode walkthrough missions from our current catalogue. This course is suitable for a wide range of personas from Engineers and Architects to Managers and PMs. It functions as an excellent overview of a wide range of security concepts and topics that are highly relevant to the SDLC.

Open Source Policies and Risks

This course covers key open-source licenses, their obligations, associated security risks, and steps for building a corporate policy for organisation-wide use. We have also merged this topic into our existing "Open-Source Software (OSS)" conceptual course to make it more robust, but also offer this as a separate course for those primarily focused on understanding policy and risk aspects. This course is suitable for a wide range of personas from Engineers and Architects to Managers and PMs.

Security for Data Scientists & Analysts

This course covers key topics including cybersecurity, data security, advanced security principles, data pipeline security, anomaly detection, SIEM, threat intelligence, and secure coding practices. This course is suitable for Data Scientists, Data Engineers and Engineers working with complex data pipelines, Engineering Managers, and Architects.

Database Security

This course covers essential steps for securing databases, from understanding threats and compliance to implementing authentication, encryption, and effective monitoring and auditing. This course is suitable for IaC Engineers, Architects, Data Engineers, and Engineering Managers.

Introduction to Automotive Security

This course offers an overview of automotive security, covering threats, fundamentals, threat modeling and standards with a deep dive into ISO 26262. It also addresses coding practices, testing, and maintenance to help mitigate vehicle security risks. This course is suitable for Engineers, Engineering Managers, Architects, and QA roles working with automotive systems.

OWASP Top 10 for Large Language Model (LLM) Applications Course Template Updated

We have updated the OWASP Top 10 for LLMs course template to match the published revisions made by OWASP on 19 November to ensure our course template is up to date with OWASP's 2025 revision of the Top 10.

Improved

Trust Score 2025 Update - Available

A new and improved version of Trust Score is now available for all customers. Find out more here.

Content Count Report updated

MITRE has released the 2024 Top 25 Software Weaknesses list, and the Content Count Report has been updated with this mapping.