2022 in Review - highlights, new innovations, and resources to help you make the most of Secure Code Warrior

Published Feb 03, 2023
by Secure Code Warrior
tl;dr?

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

2022 in review with Secure Code Warrior sheild
2022 in review with Secure Code Warrior sheild

Here at Secure Code Warrior, we’re constantly innovating to help equip developers and organizations with the right skills to tackle today’s ever changing security challenges. 

We’ve compiled the top features and updates to our platform, as well as the resources and guidelines published this year, to help your organization secure your software through developer-driven security at the start of the software development cycle.

Highlights from 2022

2022 was a big year for secure code learning. Here are some metrics we’ve pulled from our users to show the scope and scale of our learning platform.

over 60 languages, 8000+ Language activities, 55+ security challnges, 150+ Vulnerability topics

2022 was a big year of building, let's run through a few of the top highlights!

Top releases in 2022. In the US 4.33 k tournaments, in the EU 1.79k tournaments

Top Releases in 2022

Coming soon: Coding Labs

With Coding Labs, developers can advance their secure coding skills with a hands-on learning experience in a one-of-a-kind fully powered in-browser IDE. By training in a familiar environment, it’s easier than ever to go from learning new skills to applying them to actual code and preventing vulnerabilities before they’re introduced.

Coding Labs is currently available in preview for customers, reach out to your SCW representative to learn more about getting access if you haven’t already.

SCORM LMS Integration

SCORM is the international standard for e-courses. If your course is published in the SCORM format, you can be sure that almost any learning management system (LMS) will recognize it.

The SCORM LMS integration allows admins to easily manage their secure code training program alongside their other training platforms in one place, saving you time and letting you focus on the important things ,like focusing on more impactful ways to improve your training programs. 

Secure Code Warrior Connector for Okta Workflows 

This integration helps to prevent insecure code from being introduced to your codebase with the power of a security-proficiency check that can be built into your flow. 

When working on code bases, such as in a GitHub repository, you can set required lessons and assessments as qualifiers for coding in the base. This empowers your leaders to make sure each developer is ready to work in the relevant code base, helping level up the security posture of the entire organization. 

Learn more about Okta + SCW 

See the Demo here 

Learn more and see a live demo of Coding Labs in this webinar on Developer Productivity and Enablement.

Check out what’s new in our Blog

See the Okta Demo and our other integrations in one of our ProductTalks

Vulnerabilities in the news 

Secure Code Warrior offers a rapid response to top vulnerabilities to ensure you're aware of the situation and what to do. Plus, when possible we'll even create a simulation where you can get hands-on experience in the mechanics, and you can better protect your application against future threats. 

2022 was an eventful year when it came to vulnerabilities and attacks rearing their ugly heads. From a log4j vulnerability putting millions of applications at risk, to a python tar traversal path that took nearly 15 years to be fixed. Secure Code Warrior has the guidelines and free test missions to prepare you for these types of vulnerabilities. 

Additional releases and updates 

At Secure Code Warrior, we are all about scalable and engaging education that meets the developer where they are, no matter which level they are at. In June, we kicked off our quarterly ProductTalk webinar series which covers all of the exciting things that we are rolling out to our customers.

2022 saw many additions to the languages and content available at SCW, as well as critical improvements to the admin experience, and forays into more detailed reporting. 

Flexible and diverse education

Secure Code Warrior contains training content in 63+ different languages (and counting), from the most popular (Java and C++) and the rising stars like GO and Typescript. In 2022 we added even more content and languages to our repertoire. 

  • NEW OWASP course templates to help build upon your developers’ baseline knowledge and security awareness.
  • New language - SAP:ABAP  Niche languages like SAP:ABAP get the SCW treatment with training content that is delivered in developers’ preferred format - code snippets and samples
Secure Code Warrior's platform covers over 60+ different languages

Streamlined configuration and administration

We know how important it is to make it easy to deploy and maintain secure coding programs. In 2022, we made a lot of intentional improvements to make our admin’s jobs easier and create an experience that is headache free and intuitive.

  • Course Tabular View - Now it’s even easier for you to create courses for different development teams quickly.
  • Course Editing and Versioning - Admins can edit their existing courses and create basic course versions without having to create a brand new course
  • Bulk Actions - Do more with fewer clicks and make changes to courses from one place instead of applying changes across every language.
  • Continue Button - Access Courses from the Home Screen with a "Continue" button to the new homepage displays a list of activity cards to help users quickly resume the modules they have previously started.

Reporting and analytics

For company admins and team managers, the need to monitor activity across the organization is crucial to understanding your developer’s engagement and measuring the success of your training program. By accessing key metrics like number of courses completed and time spent on courses - either at the team or individual level, even more strategic decisions can be made towards building richer training programs.

  • Training Metrics - Report on the progress and success of your application security program with metrics that show how well a developer is progressing in their training rather than how long they’ve spent on the platform.
  • Assessment CSV downloads - Quickly understand your developers strengths and weaknesses to assess your strategy and maturity, with CSV downloads that include all versions of the assessment rather than just one version.

Tech stack integrations

Secure Code Warrior’s approach to integrations ensures your SCW program is built directly into your preferred products and developers’ workflows to enhance user experiences and enable just-in-time remediation, as well as stickier learning outcomes. 

  • Secure Code Warrior for GitHub - Enable contextual training inside GitHub workflows by appending contextual application security training material to SARIF files or directly within the issues and pull requests, giving developers access to knowledge when they need it most in order to help you ship quality code faster.

Learn more about SCW+GitHub 

  • Secure Code Warrior for GitLab - Embed highly relevant Secure Code Warrior training links to the Vulnerability Details section of vulnerability reports inside GitLab. This helps to reduce the time gap between learning and application of knowledge to ensure future usage.

See the Demo

Learn more about SCW+GitLab  

  • Synopsys Seeker integration - Link Secure Code Warrior resources, videos, and training links to vulnerability findings within Seeker. Micro-learning within Synopsys Seeker helps to identify and resolve vulnerabilities with easily accessible training guidance within Seeker. 

Learn More about Synopsys + SCW

Devlympics 2022

Secure Code Warrior hosted its second annual Devlympics secure coding competition on October 19th, 2022. We’re proud to share that Devlympics 2022 was even bigger than last year! This year's event included 2910 registrations with almost 800 players in either the Champion or Ultimate Warrior arenas, and has proven to be a huge success in helping developers of all experience levels advance their secure coding skills. 

During the 24-hour tournament, developers from around the world competed in offensive and defensive coding challenges in their choice of programming languages. Developers had the opportunity to compete against their peers across a range of skills, from hobbyist to professionals within the chosen languages.

At the same time, security experts were invited to the Secure Code Forum Discord channel to live-play and to share feedback, swap jokes and memes, and learn more about Secure Code Warrior. 

Resources to help you succeed 

Secure Code Warrior is one of four companies named in the Gartner® Cool Vendors™ in Software Engineering: Enhancing Developer Productivity report. In addition to offering innovative solutions that help organizations boost developer productivity and mitigate security risks, Secure Code Warrior has released a number of resources and research on the importance of Developer Driven Security. 

Whether you’re an AppSec manager struggling to get engagement and input from your developer teams, or if you’re an engineering manager working to upskill your teams’ security-posture, we’ve got you covered with the guides and tools you need to advocate for developer-driven security in your organization. 

Interested in trying out Secure Code Warrior but don’t have an account yet? Sign up for a free trial account today to get started.

Talk to Sales to learn more. 

Follow Secure Code Warrior on Twitter to get updates about the latest releases and improvements.

That’s all for now, see you in 2023!

View Resource

Your handbook to developer-driven security

DevOps and security professionals have been talking about shifting left for years, but why does it seem to be so difficult to do in practice? Learn more in our Handbook to developer-driven security here.

View handbook
Want more?

Dive into onto our latest secure coding insights on the blog.

Our extensive resource library aims to empower the human approach to secure coding upskilling.

View Blog
Want more?

Get the latest research on developer-driven security

Our extensive resource library is full of helpful resources from whitepapers to webinars to get you started with developer-driven secure coding. Explore it now.

Resource Hub

2022 in Review - highlights, new innovations, and resources to help you make the most of Secure Code Warrior

Published Feb 03, 2023
By Secure Code Warrior

Here at Secure Code Warrior, we’re constantly innovating to help equip developers and organizations with the right skills to tackle today’s ever changing security challenges. 

We’ve compiled the top features and updates to our platform, as well as the resources and guidelines published this year, to help your organization secure your software through developer-driven security at the start of the software development cycle.

Highlights from 2022

2022 was a big year for secure code learning. Here are some metrics we’ve pulled from our users to show the scope and scale of our learning platform.

over 60 languages, 8000+ Language activities, 55+ security challnges, 150+ Vulnerability topics

2022 was a big year of building, let's run through a few of the top highlights!

Top releases in 2022. In the US 4.33 k tournaments, in the EU 1.79k tournaments

Top Releases in 2022

Coming soon: Coding Labs

With Coding Labs, developers can advance their secure coding skills with a hands-on learning experience in a one-of-a-kind fully powered in-browser IDE. By training in a familiar environment, it’s easier than ever to go from learning new skills to applying them to actual code and preventing vulnerabilities before they’re introduced.

Coding Labs is currently available in preview for customers, reach out to your SCW representative to learn more about getting access if you haven’t already.

SCORM LMS Integration

SCORM is the international standard for e-courses. If your course is published in the SCORM format, you can be sure that almost any learning management system (LMS) will recognize it.

The SCORM LMS integration allows admins to easily manage their secure code training program alongside their other training platforms in one place, saving you time and letting you focus on the important things ,like focusing on more impactful ways to improve your training programs. 

Secure Code Warrior Connector for Okta Workflows 

This integration helps to prevent insecure code from being introduced to your codebase with the power of a security-proficiency check that can be built into your flow. 

When working on code bases, such as in a GitHub repository, you can set required lessons and assessments as qualifiers for coding in the base. This empowers your leaders to make sure each developer is ready to work in the relevant code base, helping level up the security posture of the entire organization. 

Learn more about Okta + SCW 

See the Demo here 

Learn more and see a live demo of Coding Labs in this webinar on Developer Productivity and Enablement.

Check out what’s new in our Blog

See the Okta Demo and our other integrations in one of our ProductTalks

Vulnerabilities in the news 

Secure Code Warrior offers a rapid response to top vulnerabilities to ensure you're aware of the situation and what to do. Plus, when possible we'll even create a simulation where you can get hands-on experience in the mechanics, and you can better protect your application against future threats. 

2022 was an eventful year when it came to vulnerabilities and attacks rearing their ugly heads. From a log4j vulnerability putting millions of applications at risk, to a python tar traversal path that took nearly 15 years to be fixed. Secure Code Warrior has the guidelines and free test missions to prepare you for these types of vulnerabilities. 

Additional releases and updates 

At Secure Code Warrior, we are all about scalable and engaging education that meets the developer where they are, no matter which level they are at. In June, we kicked off our quarterly ProductTalk webinar series which covers all of the exciting things that we are rolling out to our customers.

2022 saw many additions to the languages and content available at SCW, as well as critical improvements to the admin experience, and forays into more detailed reporting. 

Flexible and diverse education

Secure Code Warrior contains training content in 63+ different languages (and counting), from the most popular (Java and C++) and the rising stars like GO and Typescript. In 2022 we added even more content and languages to our repertoire. 

  • NEW OWASP course templates to help build upon your developers’ baseline knowledge and security awareness.
  • New language - SAP:ABAP  Niche languages like SAP:ABAP get the SCW treatment with training content that is delivered in developers’ preferred format - code snippets and samples
Secure Code Warrior's platform covers over 60+ different languages

Streamlined configuration and administration

We know how important it is to make it easy to deploy and maintain secure coding programs. In 2022, we made a lot of intentional improvements to make our admin’s jobs easier and create an experience that is headache free and intuitive.

  • Course Tabular View - Now it’s even easier for you to create courses for different development teams quickly.
  • Course Editing and Versioning - Admins can edit their existing courses and create basic course versions without having to create a brand new course
  • Bulk Actions - Do more with fewer clicks and make changes to courses from one place instead of applying changes across every language.
  • Continue Button - Access Courses from the Home Screen with a "Continue" button to the new homepage displays a list of activity cards to help users quickly resume the modules they have previously started.

Reporting and analytics

For company admins and team managers, the need to monitor activity across the organization is crucial to understanding your developer’s engagement and measuring the success of your training program. By accessing key metrics like number of courses completed and time spent on courses - either at the team or individual level, even more strategic decisions can be made towards building richer training programs.

  • Training Metrics - Report on the progress and success of your application security program with metrics that show how well a developer is progressing in their training rather than how long they’ve spent on the platform.
  • Assessment CSV downloads - Quickly understand your developers strengths and weaknesses to assess your strategy and maturity, with CSV downloads that include all versions of the assessment rather than just one version.

Tech stack integrations

Secure Code Warrior’s approach to integrations ensures your SCW program is built directly into your preferred products and developers’ workflows to enhance user experiences and enable just-in-time remediation, as well as stickier learning outcomes. 

  • Secure Code Warrior for GitHub - Enable contextual training inside GitHub workflows by appending contextual application security training material to SARIF files or directly within the issues and pull requests, giving developers access to knowledge when they need it most in order to help you ship quality code faster.

Learn more about SCW+GitHub 

  • Secure Code Warrior for GitLab - Embed highly relevant Secure Code Warrior training links to the Vulnerability Details section of vulnerability reports inside GitLab. This helps to reduce the time gap between learning and application of knowledge to ensure future usage.

See the Demo

Learn more about SCW+GitLab  

  • Synopsys Seeker integration - Link Secure Code Warrior resources, videos, and training links to vulnerability findings within Seeker. Micro-learning within Synopsys Seeker helps to identify and resolve vulnerabilities with easily accessible training guidance within Seeker. 

Learn More about Synopsys + SCW

Devlympics 2022

Secure Code Warrior hosted its second annual Devlympics secure coding competition on October 19th, 2022. We’re proud to share that Devlympics 2022 was even bigger than last year! This year's event included 2910 registrations with almost 800 players in either the Champion or Ultimate Warrior arenas, and has proven to be a huge success in helping developers of all experience levels advance their secure coding skills. 

During the 24-hour tournament, developers from around the world competed in offensive and defensive coding challenges in their choice of programming languages. Developers had the opportunity to compete against their peers across a range of skills, from hobbyist to professionals within the chosen languages.

At the same time, security experts were invited to the Secure Code Forum Discord channel to live-play and to share feedback, swap jokes and memes, and learn more about Secure Code Warrior. 

Resources to help you succeed 

Secure Code Warrior is one of four companies named in the Gartner® Cool Vendors™ in Software Engineering: Enhancing Developer Productivity report. In addition to offering innovative solutions that help organizations boost developer productivity and mitigate security risks, Secure Code Warrior has released a number of resources and research on the importance of Developer Driven Security. 

Whether you’re an AppSec manager struggling to get engagement and input from your developer teams, or if you’re an engineering manager working to upskill your teams’ security-posture, we’ve got you covered with the guides and tools you need to advocate for developer-driven security in your organization. 

Interested in trying out Secure Code Warrior but don’t have an account yet? Sign up for a free trial account today to get started.

Talk to Sales to learn more. 

Follow Secure Code Warrior on Twitter to get updates about the latest releases and improvements.

That’s all for now, see you in 2023!

Enter your details to access the full report.

We would like your permission to send you information on our products and/or related secure coding topics. We’ll always treat your personal details with the utmost care and will never sell them to other companies for marketing purposes.

Oopsie daisy