Sign in Agent Mode
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

SecureFlag

SecureFlag

Reviews from AWS customer

1 AWS reviews
  • 1
  • 4 star
    0
  • 3 star
    0
  • 2 star
    0
  • 1 star
    0

External reviews

35 reviews
from and

External reviews are not included in the AWS star rating for the product.


    reviewer2789544

Hands-on security labs have improved our skills and support continuous secure coding practice

  • December 19, 2025
  • Review provided by PeerSpot

What is our primary use case?

My main use case for SecureFlag is for learning and adopting technologies to become more secure. We completed certifications through SecureFlag as well.

A specific example of how I use SecureFlag for learning and security purposes is that we had a certification on security where we learned how to secure variables and how to pass parameters without exposing private keys and credentials.

I believe SecureFlag will be really helpful in making the platform secure by using their plan.

What is most valuable?

The best features SecureFlag offers are the labs, which provide an excellent learning resource while going through the courses.

I use the labs in SecureFlag because they are very helpful. While I progress through the courses, I can complete the labs in parallel and gain hands-on experience to learn how to implement and practice the concepts.

SecureFlag has positively impacted my organization by enhancing our skills. The platform has improved skills in my organization by allowing us to adopt new technologies. We can go through the skills we need in SecureFlag and complete the courses to gain knowledge in those areas.

What needs improvement?

I can see some areas where SecureFlag can be improved. I noticed some errors, particularly some hanging in the labs. If the labs were smoother without any disturbances, that would be great.

I hope everything is fine with the coming features, and I believe SecureFlag will deliver some more excellent features.

For how long have I used the solution?

I have been using SecureFlag for the last one year.

How are customer service and support?

SecureFlag's customer support is good. I reached out to them when I encountered some errors in the lab, and they resolved the issues I had.

I rate the customer support an eight on a scale of one to ten.

How would you rate customer service and support?

Positive

What other advice do I have?

My advice for others looking into using SecureFlag is that it will be helpful to use for the organization. I rate this product an eight overall.


    Keerthi Devipriya

Training labs have strengthened mobile app security and reduced vulnerabilities in our projects

  • December 10, 2025
  • Review provided by PeerSpot

What is our primary use case?

I am an iOS developer, and SecureFlag is mainly used to identify jailbroken situations. I have completed SecureFlag courses and labs, which is the reason for my increased involvement. I work in the cybersecurity domain where I need to use most of SecureFlag features to ensure we do not have any man-in-the-middle attacks.

SecureFlag's hands-on experiences with security vulnerabilities help my team identify vulnerabilities since the labs provided are presented in different manners. For example, in Android, it may include AndroidManifest.xml, and most people think it will be in a different place. The way it helps us learn is that if it is iOS, we refer to jailbroken devices, and if it is Android, we call it rooting. There are endless ways to learn, which is not a single approach.

My organization provided access for that.

What is most valuable?

The features of SecureFlag that I have found most valuable involve understanding and defining jailbroken devices. Jailbroken devices refer to situations where there is a chance that users can mimic the phone or their involvement, even though iPhone itself is a secured device, but there is still a chance the device can get jailbroken. Either not via internet, there might be a hardcoding way. SecureFlag, in the courses and labs I use, ensures that those kinds of vulnerabilities will not exist. That is why it was most valuable and we have relied on it most.

I have used SecureFlag's interactive exercises and have completed the labs and the courses. The interactive exercises have helped improve my security skills because I was very interested in the labs as they were organized in a different way. It is not directly a multiple-choice question or a straightforward description, and it is not lengthy with descriptions. We directly jumped into different segments including easy, medium, and hard. Inside that, we were given a lot of code, so where the initial person has the responsibility to understand the code. We read through the code and hints, and even if we missed something, the way it gives hints is something that I felt very useful.

SecureFlag has positively impacted my organization in various ways. Since courses were mostly included inside the code, the code was structured in a way that involved common classes instead of unique custom classes. The project inside the lab was not created from scratch. It is more likely in the initial classes. For instance, AppDelegate is the first class called in iOS, while Activity Manifest.xml is the first class called in Android. Including the security vulnerabilities and explaining how an attacker can exploit them benefits both our organization and developers. We have learned a lot.

What needs improvement?

A way SecureFlag can be improved would be to include video content where someone explains the approaches related to jailbroken or rooting situations. I know some videos were already there, but it would be better if more could be added.

I do not remember participating in the initial setup of SecureFlag, but I might have. We used it during the initial setup, and it was mostly straightforward. I did not face any challenges because it was mostly for learning purposes. The single sign-on feature means we do not need to enter the username and password every time, which is one good advantage.

For how long have I used the solution?

I have been working with SecureFlag for the past four to five years. I cannot say six years. My work experience is around 6.7 years, so for the past four to five years. Whenever there is a chance, I have used SecureFlag. I do have experience.

What do I think about the stability of the solution?

Regarding the stability and reliability of SecureFlag, it can handle a large scale of users without interruption. It helps to develop secure software because the number of vulnerabilities reduces, which increases turnaround time for different APIs. Security tickets raised were very few after relying on SecureFlag, which is one good advantage. We do not need to raise security tickets and wait for days; those instances have been completely reduced, providing more reliability.

What do I think about the scalability of the solution?

SecureFlag is scalable in the sense that if we would like to scale our users, it is pretty much scalable. I have learned that in terms of training, it is highly scalable because it handles a large number of users. As part of SecureFlag, we also use OAuth and SAML tools for efficient integration purposes, making it highly scalable.

How are customer service and support?

I would rate the technical support of SecureFlag as seven out of ten. It is acceptable if there is a one-day response time, but mostly I feel a maximum of three days is acceptable. They have a lot of knowledge since I raise very few queries. They are quick to respond, and they possess a good mix of practical and theoretical knowledge which helps us understand better.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Before SecureFlag, I used an alternative solution, OWASP, which I am aware of. We learned on that before SecureFlag, but I feel SecureFlag is more advantageous when we write the code.

How was the initial setup?

I do not remember participating in the initial setup of SecureFlag, but I might have. We used it during the initial setup, and it was mostly straightforward. I did not face any challenges because it was mostly for learning purposes. The single sign-on feature means we do not need to enter the username and password every time, which is one good advantage.

What other advice do I have?

I am a user of SecureFlag. I am not a developer or a seller.

I evaluate SecureFlag's analytics and reporting tools for tracking progress and identifying security gaps by using it directly inside our app, which always has the logs maintained. The code that was there has already given us some kind of metrics that help us ensure these are weak points and these are the strong points.

Tailoring training programs to my organization's needs has helped developers because we do see a lot of benefits. Since I have been using it for six years and for these two years I have been working in the cybersecurity domain specifically, I previously knew what SecureFlag was about and had been solving only easy-related queries. Now, in the cybersecurity domain, we need to ensure the necessity of SecureFlag because we must work more into the security and ensure that no data has been shared without user or customer consent. This has given a great advantage, the best advantage, I can say.

I am not aware of the pricing of SecureFlag because whatever I have been using until now, my organization offered it.

Before choosing SecureFlag, I did not evaluate other options much. I settled with SecureFlag pretty much straight away because I did not want to miss learning about other alternatives.

I would rate my overall experience with SecureFlag as a ten out of ten.


    Education Management

User-Friendly Platform with Diverse Content and Excellent Support

  • November 26, 2025
  • Review provided by G2

What do you like best about the product?
I have found the platform to be straightforward and easy to use, with a well-organized interface that facilitates efficient navigation. The content offered is diverse, providing access to a wide array of resources and information suitable for various interests and needs. Additionally, the customer support has been responsive and effective, addressing inquiries in a timely manner.
What do you dislike about the product?
Sometimes some labs would stuck, but nothing major really.
What problems is the product solving and how is that benefiting you?
SecureFlag has helped our engineers stay compliant with security standards and become more aware of secure coding practices. It’s been a practical resource for improving our team’s overall approach to secure software development.


    Harsh Shrivastava

Hands-on tasks and secure coding lessons have improved application security and reduced production issues

  • November 19, 2025
  • Review from a verified AWS customer

What is our primary use case?

SecureFlag's main use case is obtaining certifications and learning from the modules and tasks provided, then implementing that knowledge in our own applications to make them more secure. SecureFlag does an excellent job in teaching how to make applications more secure.

In my organization, most people are using SecureFlag certification and improving their secure coding practices. I have seen them making applications more secure. Since 2024, when we were introduced to SecureFlag, we have been using it extensively, and it has been very beneficial. Every year, employees can complete one certification and learn something new regarding secure coding practices.

SecureFlag has been performing exceptionally well, and it should continue to scale. Our organization is fully committed to using SecureFlag, every employee is using it, and it has been made mandatory.

What is most valuable?

SecureFlag's best features are the platform design and user experience, which have been amazing. The most distinctive aspect is the ability to perform hands-on practice. Rather than simply reading and completing content, users must engage in hands-on practice and complete tasks, which makes SecureFlag a very different and highly interactive platform.

After completing certifications, users receive a certificate that can be shared on LinkedIn or other social media platforms, with the ability to create posts directly. Additionally, SecureFlag offers trophies and points, which makes the platform much more interactive from a user perspective.

Regarding hands-on practice, SecureFlag certifications and tests include multiple tasks that require users to log in and access a VDI-type experience for hands-on practice. This approach is excellent because it requires thinking and research rather than simply completing a course. SecureFlag also provides hints as an option, which is very useful from a user perspective. I have never experienced this level of interactivity on any other platform or coding platform.

SecureFlag's website is absolutely brilliant with no delays in response time. It works flawlessly when logging into different tasks, and each task opens a new VDI, which is excellent. SecureFlag's team manages this flawlessly. SecureFlag provides certifications that are very useful and covers every technology. Certifications are not limited to any specific technologies, making all technologies available.

Many improvements have occurred after implementing SecureFlag's secure coding practices in our applications. We did not face production outages after implementing these practices, and deployment times became faster.

What needs improvement?

In terms of user experience and flawless website response, there is not much scope for improvement. However, SecureFlag can definitely add more courses and technologies to their website to cover everyone. They could also integrate different levels into every course, which would be very useful.

SecureFlag could include more detailed documentation in video format so everyone can understand the tasks better.

For how long have I used the solution?

I have been using SecureFlag since last year and completed two certifications for passing the secure coding test for OWASP top 10 in .NET. Additionally, last month in October, I completed the prompt injection and LLM secure coding test.

What do I think about the stability of the solution?

SecureFlag is very stable in terms of response time, user experience, and request handling.

What do I think about the scalability of the solution?

SecureFlag is quite scalable. Many organizations are adopting SecureFlag, which demonstrates its scalability.

How are customer service and support?

Customer support has been amazing throughout. If there are any issues, direct email contact with the customer support team is available, and the response has been quite good.

How would you rate customer service and support?

Positive

What other advice do I have?

The advice I would give to others using SecureFlag is to improve their skills by completing more certifications on different technologies that they use more frequently and to enhance their secure coding skills. Share your certifications upon completing and passing the secure coding test, and share your trophies as well. SecureFlag's best features are the user experience and the absolutely brilliant website with no response delays that works flawlessly. Logging into different tasks and having a new VDI open for every task is excellent, and how SecureFlag's team manages this is flawless. SecureFlag provides very useful certifications for every technology, which is a good feature since it is not limited to specific technologies and covers all available technologies. My overall rating for SecureFlag is 10 out of 10.


    Liannett M.

Secure Flag: Reliable Training with Outstanding Support, Minor Lab Issues

  • October 29, 2025
  • Review provided by G2

What do you like best about the product?
When I joined Forward Financing’s security team, we were still building our code security training from the ground up. We were concerned that our developers did not have the proper training for coding, being aware of the security matters. From day one, Secure Flag gave us the structure and visibility we needed to help developers understand the vulnerabilities they might be introducing through code.

Over time, I became the main point of contact for Secure Flag in our team, and that’s because it works. It’s reliable. I know that when something pops up, their amazing team is really great. They're more than just vendors; I feel like they work with us and not for us.
What do you dislike about the product?
The labs on the learning courses might have some issues when you are using a VPN, but Secure Flag team is aware of that and gives you ideas to solve any issue you might encounter.
What problems is the product solving and how is that benefiting you?
The platform gives us a great training environment for the developers of our organization, while allowing us to set goals, custom training paths and track progress per teams which is really useful.


    Financial Services

Exceptional Hands-On Training Platform with Outstanding Support

  • October 24, 2025
  • Review provided by G2

What do you like best about the product?
In my experience as an Application Security Architect responsible for running a secure coding training program, I find SecureFlag to be an exceptional platform for enterprise-level developer education. It delivers a hands-on, real-world learning experience where developers actively work in realistic coding environments to identify and fix vulnerabilities rather than passively watching videos or taking quizzes. I use its flexible features to build and customize learning paths tailored to specific teams, technologies, and skill levels. The platform’s detailed progress tracking and gamified elements, such as leaderboards and tournaments, keep developers motivated and make it easy to measure the program's performance. SecureFlag’s customer support team is exceptional, providing expert guidance and proactive assistance to ensure the program’s success from implementation through ongoing management. Overall, SecureFlag empowers me to run a secure coding training program that is practical, scalable, and highly effective across the organization.
What do you dislike about the product?
While SecureFlag is effective, it doesn’t address every challenge that can arise in a secure coding training program. It offers a solid foundation for secure coding education, but the initial setup can feel overly complex, particularly when establishing the training framework and defining organizational goals. The process demands thoughtful planning, customization, and ongoing commitment to ensure alignment with real-world development practices. Without that sustained effort, the training risks becoming a static compliance exercise rather than a dynamic, integrated component of a company’s secure development lifecycle.
What problems is the product solving and how is that benefiting you?
SecureFlag helps our developers strengthen their secure coding skills through engaging, real-world exercises instead of passive compliance training. It solves the challenge of meeting corporate security training requirements while ensuring the learning is practical and impactful. As the program administrator, I’ve seen it improve developer engagement, reduce vulnerabilities, and enhance our overall security posture.


    Financial Services

Great for Secure Coding, But Needs More Kotlin Labs

  • October 21, 2025
  • Review provided by G2

What do you like best about the product?
Helps our developer improve on their secure coding skills
What do you dislike about the product?
limited Kotlin training/labs for our developers
What problems is the product solving and how is that benefiting you?
It is important to ensure that our developers are well trained in both current and emerging technologies. They also need to stay informed about the latest threats they may encounter while coding.


    Ricardo Nahuel P.

A Winning Combination between Intuitive Platform and Exceptional Service

  • October 07, 2025
  • Review provided by G2

What do you like best about the product?
We appreciate the wide range of features offered: the platform is easy to use, simple to implement, and integrates smoothly with Okta. It also provides numerous learning paths, regularly updates its content, and offers excellent customer support.

This versatile platform delivers more than just content—it creates a gamified experience for our Security Champions program, including tournaments, quizzes, and a points system. Our developers are also pleased with the platform, rating it an average of 9 out of 10.
What do you dislike about the product?
We don't have any particular feedback at the moment, but it occurs to me that adding an AI chatbot with all the content vectorized in a RAG could be useful. This feature would make it easier for developers to look up security code information. Although we never listed this as a requirement, writing this review made me realize it could be a valuable addition—just something nice to have.

Regarding the Threat Model API, it would be helpful if there were more endpoints available. This would allow for greater automation of workflows and make it possible to create diagrams entirely outside their platform while still using their API.
What problems is the product solving and how is that benefiting you?
We needed quality content to run our Security Champions program. But not only content, also a gamify platform with tournaments, quizzes, certifications, etc.


    Computer Software

Great platform to learn secure development

  • September 26, 2025
  • Review provided by G2

What do you like best about the product?
SecureFlag platform is one of the most effective and developer friendly solutions we've used for secure coding training. What sets it apart is the hands on learning approach that lets developers fix real vulnerabilities in realistic environments. So it's not just theory, it's practical and relevant with real word examples.
The platform supports a wide variety of programming languages and frameworks, which makes it easy to train diverse development teams without needing multiple tools. Gamification features like progress tracking, achievements, and leaderboards keep engagement high and encourage continuous learning. Tournaments are also fun and engaging.
From an administrative standpoint, it's simple to set up. Assigning modules, creating learning paths, and tracking progress is straightforward, and the reporting features give a clear view of how individuals and teams are progressing.
What do you dislike about the product?
While some learning paths are really well covered, some not so popular languages do not have a large selection of labs. The positive side is that content gets added frequently and more and more things
It would be helpful to have additional options for exporting reports and access to more detailed analytics.
What problems is the product solving and how is that benefiting you?
SecureFlag is solving the challenge of effectively training a large number of development teams with different tech stacks and skill levels. This helps us scale security awareness efficiently and build a stronger security culture company-wide.


    Jørgen A.

Two Years with SecureFlag – Building Stronger Security Skills

  • September 19, 2025
  • Review provided by G2

What do you like best about the product?
Developers appreciate the interactive nature of the platform, which makes learning about secure coding both practical and enjoyable.
SecureFlag provides a dedicated environment where users can work hands-on with real-world security challenges.
The platform helps developers make better decisions regarding security and information security in general.
After two years of use, SecureFlag has become an integral part of your team’s security training.
What do you dislike about the product?
At times, the tests and challenges have been stricter than what is covered in the learning modules, which can be frustrating for users.
Some users may find it challenging to bridge the gap between the training material and the expectations in the practical tests.
What problems is the product solving and how is that benefiting you?
As software becomes increasingly complex and security threats evolve, it’s a challenge to ensure that all developers consistently apply secure coding practices and make informed decisions about information security. Traditional training methods are often too theoretical, lack engagement, or fail to provide a realistic environment for hands-on learning.

SecureFlag addresses this by providing an interactive, practical training platform where our developers can actively practice secure coding, face real-world security challenges, and receive immediate feedback in a dedicated environment.