Product Release Recap: Q1 2025

Quests

This quarter saw the official release of Quests, or SCW’s new turnkey learning paths curated with highly relevant assignments delivered in developers’ preferred coding languages. Developments included:

• Quest Objectives - Easily create Quests from the following learning objectives: Custom Vulnerabilities, Most Common Vulnerabilities (OWASP Top 3, 5, and 10), and PCI-DSS.
  
  
• Quests Report - Report on learners’ progress for the Quests assigned to them based on specific learning objectives.
  
  
• Guided Learning Visibility - Turn off Guided Learning under Administration Platform Configuration Select User Experience to prioritise Quests and make My Quests the default learner homepage.
  
  

Trust Agent

SCW Trust Agent brings together insights and controls around developer security competencies and code commits. Developments included:

• Minimum Skill Level Requirements - Configure minimum required Skill Levels in your Trust Agent policy, allowing you to define skill-based criteria for commits being made by developers. See this Knowledge Base article for more information.

Content

This quarter saw lots of new content including course templates, activities, and guidelines:
New Course Templates:

• Modern C and C++ Security
• Secure Programming for Go
• Introduction to Cryptography for Developers and Architects
• Secure Password Storage
• Hardening Your APIs
• Coding with AI
• Secure Implementation of Containerized Cloud Infrastructure
• Fundamentals of iOS
• Secure Programming for iOS
• Introduction to Cloud Security and Introduction to AI Risk & Security
• Securing Infrastructure as Code
• Kubernetes Security
• Securing Amazon Web Services
• Securing Microsoft Azure and Securing Google Cloud Platform
• Foundations of COBOL Security
• Introduction to Securing the Internet of Things
• NIS2 course
• Overview of Application Security Testing course
• OWASP Top 10 CI/CD course
• MISRA for C Embedded course

• 31 Coding Labs in C Basic, Java Spring, Java Spring API, and Java Enterprise Edition API
• 22 Challenges in Java Script React and Java Spring
  • V2 Challenges are now in Beta Testing! Try them out and provide feedback
• Mobile Guidelines covering 10 vulnerability topics with language-specific snippets in 7 mobile languages/frameworks
• 6 Additional Guidelines for LLM vulnerabilities and foundations of software security
• 1 LLM Walkthrough