What is the Secure Code Warrior® Platform

Secure Code Warrior® is an integrated platform that provides secure coding training and tools that helps shift developer focus from vulnerability reaction to prevention.

Our platform uses hands-on training, team tournaments, real-time coaching, micro-learning for every skill level, and online assessments. 

TOURNAMENTS

Create awareness that drives continuous secure coding engagement

Tournaments on the Secure Code Warrior platform allow organizations to run competitive, engaging events that get the whole developer community involved.

Players are presented with a series of code challenges that will ask them to identify the problem, locate the insecure code, and fix the vulnerability. All challenges are based on real code examples and ranked from easy to fiendishly hard.

Each player can choose from a range of software languages to compete fairly in the tournament.

Throughout a tournament, developers will earn points as they climb the leaderboard to try and be crowned the ‘Secure Code Warrior.’

• Run an organization-wide awareness exercise with your software developers
• Quickly identify security champions within your developer community
• Get everyone registered and engaged through friendly competition

For our most popular languages (C# WebForms, C# MVC, Java Spring, Java EE, Node.JS, and Python.django & C# core), a tournament bonus level can be enabled.

This bonus level, known as Missions, lets developers play through new and exciting content that demonstrates the impact of a vulnerability in a real-life application example.

TRAINING

Verify secure coding skills with self-paced, scalable, online learning

Our fun, competitive, and engaging training equips developers to think and act with a security mindset every day. It's 100% hands-on, offering experience with different vulnerabilities in diverse code samples.

Developers can view their progress throughout their journey within the platform. They can see their completed challenges, strengths and weaknesses, time spent on training, and their accuracy.

The gamified aspect of the platform offers hints and allows developers to earn points and collect badges, with anonymized leaderboards for teams.

The platform is constantly being updated and expanded. There are currently hundreds of short challenges available that cover over 50 common vulnerabilities, including the OWASP top 10. We're also constantly updating our suite of languages and frameworks, and creating new challenges daily.

See here for the latest supported languages and frameworks.

COURSES

Build custom learning pathways for the vulnerabilities impacting your applications

Courses are guided learning pathways with configurable modules that can help improve the secure coding skills across your organization by addressing the vulnerabilities specific to your applications.

Designed for developers, engineering leads, and software security professionals, Courses help organizations increase efficiency and productivity within their development teams by offering framework-specific coding challenges that can help minimize recurring vulnerabilities from impacting the software development lifecycle.

Each learning module is a collection of activities including video content, language:framework-specific coding challenges and check-point challenges, which build secure coding skills and awareness.

Courses can be configured to end within a set timeframe, or by a specific date, to help meet compliance and audit requirements.

ASSESSMENTS

Qualify secure coding skills in a customizable and controllable environment

Assessments in the Secure Code Warrior platform allow organizations to qualify and create a skill baseline for the secure coding abilities of their existing developers, off-shore teams, new hires, and graduates.

These can build both developer and manager confidence by demonstrating that teams have a base level of competency when it comes to securing their code.

Often, assessments are used to demonstrate to auditors that developers are learning the necessary secure coding skills outlined by regulations like PCI-DSS and NiST.

API

Integrate user management and reporting with your existing systems

Streamline user management and save time by programmatically managing users and building management reports in your existing executive dashboards and reporting tools. Learn more about how to configure API.