Secure Code Warrior Agile Learning Platform
Secure Code WarriorReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
31 reviews
from
External reviews are not included in the AWS star rating for the product.
Intuitive and fun
What do you like best about the product?
It is extremely easy to pick up Secure Code Warrior and it's fun too. It feels like you're playing and game and before you know it, you're learning how to write secure code!
What do you dislike about the product?
Secure Code Warrior was not a good fit for Software Testers. However, this changed with Missions. Everyone I have spoken to, be it Developers or QAs, enjoys playing SCW Missions. I feel the platform could be improved further with Missions that were tailored toward black box penetration testing.
What problems is the product solving and how is that benefiting you?
Secure Code Warrior has helped to raise awareness of security vulnerabilities, educate how the vulnerabilities can be exploited, highlight the damage the exploitation can cause to a business, and show best practices to prevent the vulnerabilities.
Recommendations to others considering the product:
Try it.
A great way to frustrate your devs
What do you like best about the product?
The training videos were reasonable. The examples were clear. The assessments were nothing like them
What do you dislike about the product?
The assessment code was unintelligible at best. No comments, no context as to what a function or class is supposed to be doing. Constrained to a terrible online IDE with no quality-of-life functionality that would be used to review code (e.g. no control-click to take you to a class or variable definition)
What problems is the product solving and how is that benefiting you?
It's supposed to be helping developers shift-left on security. Instead, it's frustrating us with the terrible IDE and tricky for the sake of tricks questions
Really good platform for training developers on secure coding techniques.
What do you like best about the product?
The platform makes available interactive activities for developers so they can immediately test what they see during the course.
The support of the SCW team is precious. They're always available for advice and support.
The support of the SCW team is precious. They're always available for advice and support.
What do you dislike about the product?
Nothing in particular. It would be fine to have more flexibility in the management of the teams and the languages assigned to them.
What problems is the product solving and how is that benefiting you?
Developers usually don't have security in their minds and SCW helps to build security awareness and security awareness means less security issues.
Training and Learning
What do you like best about the product?
Different training modules
Level of challenges
Database of supported languages
Ability to target a specific vulnerability
Level of challenges
Database of supported languages
Ability to target a specific vulnerability
What do you dislike about the product?
Reporting
Method to create custom courses
Lack of solution correlation to real world
Method to create custom courses
Lack of solution correlation to real world
What problems is the product solving and how is that benefiting you?
User training
Pentest vulnerability mitigation training
Sure code best practice adoption
Pentest vulnerability mitigation training
Sure code best practice adoption
Awesome platform to get introduced to Secure Coding Practices
What do you like best about the product?
The Platform was very easy to use, especially for onboarding. Also, it supports a breadth of languages which makes it easy to design security education programs.
What do you dislike about the product?
Nothing to dislike. As an education platform, it's tricky to get the depth of content. As a platform, it's great for starters and engineers new to a programming language to learn the best practices of a particular framework, however, it's difficult to keep the engagement once the developer has reached a certain level of maturity.
What problems is the product solving and how is that benefiting you?
Introducing engineers to secure coding and ensuring that they are familiar with best practices of a particular language or framework. Also making engineers aware of top vulnerabilities associated with a particular programming language. It plays a part in improving security culture.
Easy and pleasant
What do you like best about the product?
That the customer success team is easygoing and super helpful.
What do you dislike about the product?
I have nothing that comes to mind. I am really satisfied.
What problems is the product solving and how is that benefiting you?
Improve developer's knowledge of secure development.
We can easily see the developers participating and using the platform to improve their knowledge.
We can easily see the developers participating and using the platform to improve their knowledge.
Recommendations to others considering the product:
Do it! It will be a great experience and the customer success team will contribute to that.
Super cool product and best in class Customer Engagement Team
What do you like best about the product?
Wide coverage of SW languages and frameworks and relevant training materials
What do you dislike about the product?
A user access role in the product can be bound to a Developer or an Admin, not to both. We need Admins to be able to train themselves.
What problems is the product solving and how is that benefiting you?
Training our developers so they can fix vulns
Secure Code Warrior is a great place to expand a developers knowledge on secure coding.
What do you like best about the product?
The best part of Secure Code Warrior is how the UI is fun and interactive, which helps keep developers interested and focused on the tasks at hand, and also helps make them want to take part on their own accord.
What do you dislike about the product?
There isn't much to dislike. Sometimes the hints are less helpful than they could be as they will take away an answer rather than give more details about it, however, this is something that we raised with the Secure Code Warrior team and they took this on board and have already started working on better ways to represent the hints to give the developers the best experience when completing their courses.
What problems is the product solving and how is that benefiting you?
I work in the application security department of my company, and as such, it is my responsibility to ensure the developers are coding securely. With the help of Secure Code Warrior courses, I can ensure that every developer is trained to look out for certain threat vectors, and how to overcome them when they are coding. This sets a standard where we know the developers are keeping security in mind whilst creating new features which in turn helps reduce the number of vulnerabilities pushed to development. If a vulnerability is created and pushed to development, the cost to fix this is 10x more than if it was handled correctly to begin with. Secure Code Warrior helps to make sure the 'shift left' security methodology is applied effectively and sets a standard of knowledge you can prove across the business with the assessments the developers must pass.
A true secure coding training platform for software developers
What do you like best about the product?
The ability to be hands-on to learn secure coding as a sofware developer/programmer. As a beginner in secure coding, I can refer to the resources section (videos). As an intermediate level, I can play with challenges on the training or courses ground. As an expert, I can take assessments or participate in timed-tournaments. SCW is for every skill level of a developer.
What do you dislike about the product?
The GUI sometimes shapes out when operating it at high loads (prolonged period of use).
What problems is the product solving and how is that benefiting you?
Multiple.
1. Every software developer who joins the company is trained on OWASP Top 10 (at awareness level, at high skilled level). Based on secure coding skill, we can assign the developer to low sensitive or high sensitve projects.
2. PCI DSS compliance enforces software developers undergo the mandatory training. Thankfully, SCW provides secure coding course as compliant with PCI-DSS. This helps to showcase the developer's attendance and completion report during PCI-DSS audits.
1. Every software developer who joins the company is trained on OWASP Top 10 (at awareness level, at high skilled level). Based on secure coding skill, we can assign the developer to low sensitive or high sensitve projects.
2. PCI DSS compliance enforces software developers undergo the mandatory training. Thankfully, SCW provides secure coding course as compliant with PCI-DSS. This helps to showcase the developer's attendance and completion report during PCI-DSS audits.
Recommendations to others considering the product:
While there are tens of other tools in the market on secure coding, SecureCodeWarrior is the best platform that works for every software developer in the world, whatever skill level s/he is at. I recommend every company in the market that makes software for any business reasons to use SecureCodeWarrior as a training platform on secure coding to their developers.
SCW our journey to date
What do you like best about the product?
The gamification aspect, across a lot of computer languages, some vendors only offer it in one language/platform. During a tournament, developers/programmers can also compete with others.
What do you dislike about the product?
Learning Needs Analysis at an individual even team level needs further development. Some activities do not count towards achieving higher maturity, e.g. from Beginner to Security Aware, when it clearly should be.
What problems is the product solving and how is that benefiting you?
Getting staff to think about OWASP Top 10, log4J vulnerabilities and realising that it doesn't take as much effort as initially thought to make their apps more secure.
Recommendations to others considering the product:
Macro learning and gamification are the most attractive features of SCW. Considering the cost of specialised courses, the annual cost per person for a corporate license, is reasonable. Do note that you need to have a clear Program and Communications Plan to get the most out of SCW. Running tournaments within and outside your organisation will be beneficial.
showing 11 - 20