What is the Secure Code Warrior® Platform

Secure Code Warrior® provides secure code learning, developer and governance tools that shifts the approach to risk management and vulnerability reduction from reactive to proactive. 

Our platform uses conceptual and interactive hands-on learning to support and expand the knowledge and application of secure code for learners at every skill level.

SCW Trust Score

An industry-first benchmark that quantifies the impact of your secure coding program

SCW Trust Score provides a comprehensive assessment of your development team's secure coding skills enabling AppSec teams and CISOs to gain a holistic understanding of their team's competencies and pinpoint areas for optimization.

SCW Trust Agent

Visibility and control to scale developer-driven security

SCW Trust Agent delivers visibility across your entire code repository analyzing every commit against developer secure code skills. It gives you the ability to set policies based on the project’s sensitivity and requirements, ensuring language specific security competencies without slowing down software delivery. SCW Trust Agent builds upon SCW Trust Score, analyzing how effectively your secure code learning program is applied in every commit.

Quests

Quests are structured learning paths, curated to sharpen developer security skills and enhance their understanding of software vulnerabilities. Quests enables organizations to assign their learning goals based on the company's compliance, language and vulnerability requirements. 

Each Quest contains multiple learning activities including:

• Video: Learn foundational software security fundamentals and concepts
  
  
• Guideline: learn both general mitigation strategies to strengthen their security knowledge, as well as in-depth best practices for the selected language/framework
  
  
• Walkthrough: Experience the impact of software vulnerabilities with hands-on simulated apps upon real-world applications to build and practice offensive secure coding skills
  
  
• Challenge: Learn how to locate, and fix software flaws 
  
  
• Coding Labs: Advance your secure coding skills through interactive hands-on training with intuitive feedback in a fully powered in-browser IDE
  
  
• Quiz (where available): Assess secure code competencies with time bound challenges that challenge developers to demonstrate their knowledge and skills.

TOURNAMENTS

Create awareness that drives continuous secure coding engagement

Tournaments on the Secure Code Warrior platform allow organizations to run competitive, engaging events that get the whole developer community involved.

Players are presented with a series of code challenges that will ask them to identify the problem, locate the insecure code, and fix the vulnerability. All challenges are based on real code examples and ranked from easy to fiendishly hard.

Throughout a tournament, developers will earn points as they climb the leader board to try and be crowned the ‘Secure Code Warrior.’

• Run an organization-wide awareness exercise with your software developers
• Quickly identify security champions within your developer community
• Get everyone registered and engaged through friendly competition

For our most popular languages (C# WebForms, C# MVC, Java Spring, Java EE, Node.JS, and Python.django & C# core), a tournament bonus level can be enabled.

This bonus level, known as Missions, lets developers play through new and exciting content that demonstrates the impact of a vulnerability in a real-life application example.

Explore

Verify secure coding skills with self-paced, scalable, online learning

Explore offers learners the full catalog of all of Secure Code Warrior's learning materials in an exploratory self-paced learning environment.

Developers can view their progress throughout their journey within the platform. They can see their completed activities (Coding Labs, Video, Challenge, Guidelines, Missions, Walkthroughs)

The platform is constantly being updated and expanded. There are currently thousands of activities that cover over 50 common vulnerabilities, including the OWASP top 10. We're also constantly updating our suite of languages and frameworks, and creating new activities daily.

See here for the latest supported languages and frameworks.

COURSES

Build custom learning pathways for the vulnerabilities impacting your applications

Courses are guided learning pathways with configurable modules that improve  secure coding skills across your organization by addressing the vulnerabilities specific to your applications.

Courses help organizations increase efficiency and productivity within their development teams by offering framework-specific coding challenges that can help minimize recurring vulnerabilities from impacting the software development lifecycle.

Each learning module is a collection of activities including video content, language:framework-specific coding challenges and check-point challenges, which build secure coding skills and awareness.

Courses can be configured to end within a set timeframe, or by a specific date, to help meet compliance and audit requirements.

ASSESSMENTS

Qualify secure coding skills in a customizable and controllable environment

Assessments in the Secure Code Warrior platform allow organizations to qualify and create a skill baseline for the secure coding abilities of their existing developers, off-shore teams, new hires, and graduates.

These can build both developer and manager confidence by demonstrating that teams have a base level of competency when it comes to securing their code.

Often, assessments are used to demonstrate to auditors that developers are learning the necessary secure coding skills outlined by regulations like PCI-DSS and NIST.

Reporting API Powered by GraphQL

More flexibility in querying and more control over the data you retrieve than our conventional REST API

Reporting API powered by GraphQL takes your reporting to the next level by querying exactly the data you need, giving you the flexibility to build detailed and customised reports and integrate them effortlessly into your existing dashboards and tools. 

API

Integrate user management and reporting with your existing systems

Streamline user management and save time by programmatically managing users and building management reports in your existing executive dashboards and reporting tools. Learn more about how to configure API.