Menu

    Product Release Recap: Q3 2025

    Avatar
    Secure Code Warrior Elves
    • Updated
    Follow


    Cybermon 2025: The Age of AI

    Highly anticipated Cybermon campaign is back for 2025, starting 6 October 2025. All new content & characters, exclusive content, and prizes await. See this article for more details.


     

    Challenges: AI 

    Challenges: AI  have been reworked to show the exercise in an in-browser IDE coding session with a 'copilot' assistant. This reflects the modern developer workflow where security reviews happen more frequently as AI suggests code. 
     

    In August and September alone, 197 Challenges: AI  have been added to the platform! Check them out here.

     

     

    Quests

    Quests can now be assigned to learners based on tags, making it easier than ever to deliver training. Also, new Quest objectives and topics are now available for the following concepts and standards:

    • NIST (Executive Order 14028)
    • NIS2
    • Secure Implementation of Docker
    • Secure Implementation of Kubernetes
    • OWASP TOP 10 CI/CD (Github Actions)
    • OWASP TOP 10 CI/CD (Jenkins Declarative)
    • OWASP TOP 10 CI/CD (Jenkins Scripted)


     
    • Modern C++ Security
    • Modern C Security
    • Secure Implementation of Docker
    • Secure Implementation of Kubernetes
    • Kubernetes Security
    • Foundations of COBOL Security
    • Defensive Programming for COBOL
    • Android Security
    • Fundamentals of iOS
    • Secure Programming for iOS
    • Advanced Android Security


     

    Content

    This quarter saw lots of new content including course templates, activities, and guidelines:

    • Threat Modeling with AI 
    • AI Agents and their Protocols (MCP, A2A, and ACP) 
    • Essential API Security: Authentication & Authorization 
    • Container Security Introduction to HTML5 Security 
    • Defensive Programming for HTML5 Security
    •  SAML Security

     

    Metrics and Reporting

    New dashboards, reports, and governance features continue to provide holistic visibility into your secure coding program and its impact.

    •  Trust Agent Policy Gating - Allows administrators to apply and enforce minimum secure coding standards directly at the commit level by setting configurable policy gates on CI pipelines, preventing insecure code from entering business-critical repositories (e.g., for PCI-DSS compliance). Quest completion can now be leveraged as a requirement for high trust commits in Trust Agent policy.
    •  Vulnerability ROI Insights - Admins can now securely upload CSV files containing application security findings to overlay with SCW learning data, producing an ROI report on training impact directly in the SCW platform. 
    • CISO Value Email - Provides a rolled-up view of the Trust Score, key metrics, and strategic recommendations

    Related articles

    Comments

    0 comments

    Please sign in to leave a comment.