
Un jeu vidéo pour améliorer le processus de recrutement
It's no secret that we believe strongly in the power of gamification at Secure Code Warrior to engage developers to code securely. It's what we do, and the results have been amazing so far. But what about using an actual video game to assess potential new hires? Is that going a step too far, or could it possibly be an effective practice?
That's what the startup Scoutible is doing, and I have to say I'm intrigued by their approach. Scoutible assesses potential hires using a video game - not gamified assessments, but an actual video game experience - and checks how the person behaves in certain situations. The game captures "millions of data points used to measure a candidate's various attributes" during just 20 minutes of gameplay, and uses those data points to rate how the candidate would do for the job in question.
There's a lot to like here, and a lot to learn from as well. The product is flexible to meet their customers'needs, and it targets a problem that many people responsible for hiring have known for a long time. Self-reported assessment, like Myers-Briggs, just aren't reliable. They allow you to "game" the system, or at least try to, by not being entirely honest. In a game, you have an objective and must adapt and problem solve to meet that objective. It's quite simple, and ingenious if it works as Scoutible claims. I can't wait to hear more about it.
Gaming versus gamification
Scoutible's approach makes sense for their target audience and use case. At one point in Secure Code Warrior's journey, we considered the value of a full gaming platform, or mini games built into the training, but in the end that angle didn't really add enough value for our purposes. The end users who take our security training know they are supposed to be learning.
Within our Secure Code Warrior platform, we measure the secure coding skills of a software developer while using game-based elements to keep them engaged. That means keeping these questions in mind:
- Do they understand the most common software security weaknesses?
- Can they fix common security bugs using framework specific security functions?
- Are they confident about their software security skills?
- What are their strengths and skills gaps in terms of secure code?
Caring by design
There's another reason I can relate strongly with Scoutible's product. Not only is it a benefit to the hiring company, but also to the candidate. Not all strong candidates you'll encounter are good at interviewing. For some, it's just not in their personalities. For others, they might never have been taught the fine art of interviewing, or maybe they're new to the workforce and this is their first interview.
This is where I see a similarity with software developers. Sadly, there just isn't a focus on security in many university programs. Aspiring developers are told "You'll learn it on the job." They leave school knowing how to make their code work, but they unknowingly perpetuate all of the same vulnerabilities that we've been fighting against for 20 or more years.
When developers do get that job and ask to learn about security, they have even less time than when they were in school. They're paid to produce functional, effective software, and many of the developer security training courses ... well, they're boring. Let's be honest.
What if you could get your developers, new and old, to care about security without really thinking about it? How do you make training interesting, engaging, and even fun, while also still being effective?
That's our challenge, and just like Scoutible's, it's a very real one. Just because the problem is incredibly serious doesn't mean the solution has to be mundane and boring. We've tried that already. We prefer to inject a little fun, excitement, competition, and engagement into our solution. So far, it's worked very, very well.
I thought if we could build a tool that felt like a game, and incorporated tests for the appropriate personality and cognitive attributes, we could address many of the problems I'd been studying.
https://www.inc.com/kevin-j-ryan/scoutible-video-game-reinventing-the-hiring-process.html
Chief Executive Officer, Chairman, and Co-Founder

Secure Code Warrior est là pour aider votre organisation à sécuriser le code tout au long du cycle de développement logiciel et à créer une culture dans laquelle la cybersécurité est une priorité. Que vous soyez responsable de la sécurité des applications, développeur, responsable de la sécurité informatique ou toute autre personne impliquée dans la sécurité, nous pouvons aider votre organisation à réduire les risques associés à un code non sécurisé.
Réservez une démoChief Executive Officer, Chairman, and Co-Founder
Pieter Danhieux is a globally recognized security expert, with over 12 years experience as a security consultant and 8 years as a Principal Instructor for SANS teaching offensive techniques on how to target and assess organizations, systems and individuals for security weaknesses. In 2016, he was recognized as one of the Coolest Tech people in Australia (Business Insider), awarded Cyber Security Professional of the Year (AISA - Australian Information Security Association) and holds GSE, CISSP, GCIH, GCFA, GSEC, GPEN, GWAPT, GCIA certifications.


It's no secret that we believe strongly in the power of gamification at Secure Code Warrior to engage developers to code securely. It's what we do, and the results have been amazing so far. But what about using an actual video game to assess potential new hires? Is that going a step too far, or could it possibly be an effective practice?
That's what the startup Scoutible is doing, and I have to say I'm intrigued by their approach. Scoutible assesses potential hires using a video game - not gamified assessments, but an actual video game experience - and checks how the person behaves in certain situations. The game captures "millions of data points used to measure a candidate's various attributes" during just 20 minutes of gameplay, and uses those data points to rate how the candidate would do for the job in question.
There's a lot to like here, and a lot to learn from as well. The product is flexible to meet their customers'needs, and it targets a problem that many people responsible for hiring have known for a long time. Self-reported assessment, like Myers-Briggs, just aren't reliable. They allow you to "game" the system, or at least try to, by not being entirely honest. In a game, you have an objective and must adapt and problem solve to meet that objective. It's quite simple, and ingenious if it works as Scoutible claims. I can't wait to hear more about it.
Gaming versus gamification
Scoutible's approach makes sense for their target audience and use case. At one point in Secure Code Warrior's journey, we considered the value of a full gaming platform, or mini games built into the training, but in the end that angle didn't really add enough value for our purposes. The end users who take our security training know they are supposed to be learning.
Within our Secure Code Warrior platform, we measure the secure coding skills of a software developer while using game-based elements to keep them engaged. That means keeping these questions in mind:
- Do they understand the most common software security weaknesses?
- Can they fix common security bugs using framework specific security functions?
- Are they confident about their software security skills?
- What are their strengths and skills gaps in terms of secure code?
Caring by design
There's another reason I can relate strongly with Scoutible's product. Not only is it a benefit to the hiring company, but also to the candidate. Not all strong candidates you'll encounter are good at interviewing. For some, it's just not in their personalities. For others, they might never have been taught the fine art of interviewing, or maybe they're new to the workforce and this is their first interview.
This is where I see a similarity with software developers. Sadly, there just isn't a focus on security in many university programs. Aspiring developers are told "You'll learn it on the job." They leave school knowing how to make their code work, but they unknowingly perpetuate all of the same vulnerabilities that we've been fighting against for 20 or more years.
When developers do get that job and ask to learn about security, they have even less time than when they were in school. They're paid to produce functional, effective software, and many of the developer security training courses ... well, they're boring. Let's be honest.
What if you could get your developers, new and old, to care about security without really thinking about it? How do you make training interesting, engaging, and even fun, while also still being effective?
That's our challenge, and just like Scoutible's, it's a very real one. Just because the problem is incredibly serious doesn't mean the solution has to be mundane and boring. We've tried that already. We prefer to inject a little fun, excitement, competition, and engagement into our solution. So far, it's worked very, very well.
I thought if we could build a tool that felt like a game, and incorporated tests for the appropriate personality and cognitive attributes, we could address many of the problems I'd been studying.
https://www.inc.com/kevin-j-ryan/scoutible-video-game-reinventing-the-hiring-process.html

It's no secret that we believe strongly in the power of gamification at Secure Code Warrior to engage developers to code securely. It's what we do, and the results have been amazing so far. But what about using an actual video game to assess potential new hires? Is that going a step too far, or could it possibly be an effective practice?
That's what the startup Scoutible is doing, and I have to say I'm intrigued by their approach. Scoutible assesses potential hires using a video game - not gamified assessments, but an actual video game experience - and checks how the person behaves in certain situations. The game captures "millions of data points used to measure a candidate's various attributes" during just 20 minutes of gameplay, and uses those data points to rate how the candidate would do for the job in question.
There's a lot to like here, and a lot to learn from as well. The product is flexible to meet their customers'needs, and it targets a problem that many people responsible for hiring have known for a long time. Self-reported assessment, like Myers-Briggs, just aren't reliable. They allow you to "game" the system, or at least try to, by not being entirely honest. In a game, you have an objective and must adapt and problem solve to meet that objective. It's quite simple, and ingenious if it works as Scoutible claims. I can't wait to hear more about it.
Gaming versus gamification
Scoutible's approach makes sense for their target audience and use case. At one point in Secure Code Warrior's journey, we considered the value of a full gaming platform, or mini games built into the training, but in the end that angle didn't really add enough value for our purposes. The end users who take our security training know they are supposed to be learning.
Within our Secure Code Warrior platform, we measure the secure coding skills of a software developer while using game-based elements to keep them engaged. That means keeping these questions in mind:
- Do they understand the most common software security weaknesses?
- Can they fix common security bugs using framework specific security functions?
- Are they confident about their software security skills?
- What are their strengths and skills gaps in terms of secure code?
Caring by design
There's another reason I can relate strongly with Scoutible's product. Not only is it a benefit to the hiring company, but also to the candidate. Not all strong candidates you'll encounter are good at interviewing. For some, it's just not in their personalities. For others, they might never have been taught the fine art of interviewing, or maybe they're new to the workforce and this is their first interview.
This is where I see a similarity with software developers. Sadly, there just isn't a focus on security in many university programs. Aspiring developers are told "You'll learn it on the job." They leave school knowing how to make their code work, but they unknowingly perpetuate all of the same vulnerabilities that we've been fighting against for 20 or more years.
When developers do get that job and ask to learn about security, they have even less time than when they were in school. They're paid to produce functional, effective software, and many of the developer security training courses ... well, they're boring. Let's be honest.
What if you could get your developers, new and old, to care about security without really thinking about it? How do you make training interesting, engaging, and even fun, while also still being effective?
That's our challenge, and just like Scoutible's, it's a very real one. Just because the problem is incredibly serious doesn't mean the solution has to be mundane and boring. We've tried that already. We prefer to inject a little fun, excitement, competition, and engagement into our solution. So far, it's worked very, very well.
I thought if we could build a tool that felt like a game, and incorporated tests for the appropriate personality and cognitive attributes, we could address many of the problems I'd been studying.
https://www.inc.com/kevin-j-ryan/scoutible-video-game-reinventing-the-hiring-process.html

Cliquez sur le lien ci-dessous et téléchargez le PDF de cette ressource.
Secure Code Warrior est là pour aider votre organisation à sécuriser le code tout au long du cycle de développement logiciel et à créer une culture dans laquelle la cybersécurité est une priorité. Que vous soyez responsable de la sécurité des applications, développeur, responsable de la sécurité informatique ou toute autre personne impliquée dans la sécurité, nous pouvons aider votre organisation à réduire les risques associés à un code non sécurisé.
Afficher le rapportRéservez une démoChief Executive Officer, Chairman, and Co-Founder
Pieter Danhieux is a globally recognized security expert, with over 12 years experience as a security consultant and 8 years as a Principal Instructor for SANS teaching offensive techniques on how to target and assess organizations, systems and individuals for security weaknesses. In 2016, he was recognized as one of the Coolest Tech people in Australia (Business Insider), awarded Cyber Security Professional of the Year (AISA - Australian Information Security Association) and holds GSE, CISSP, GCIH, GCFA, GSEC, GPEN, GWAPT, GCIA certifications.
It's no secret that we believe strongly in the power of gamification at Secure Code Warrior to engage developers to code securely. It's what we do, and the results have been amazing so far. But what about using an actual video game to assess potential new hires? Is that going a step too far, or could it possibly be an effective practice?
That's what the startup Scoutible is doing, and I have to say I'm intrigued by their approach. Scoutible assesses potential hires using a video game - not gamified assessments, but an actual video game experience - and checks how the person behaves in certain situations. The game captures "millions of data points used to measure a candidate's various attributes" during just 20 minutes of gameplay, and uses those data points to rate how the candidate would do for the job in question.
There's a lot to like here, and a lot to learn from as well. The product is flexible to meet their customers'needs, and it targets a problem that many people responsible for hiring have known for a long time. Self-reported assessment, like Myers-Briggs, just aren't reliable. They allow you to "game" the system, or at least try to, by not being entirely honest. In a game, you have an objective and must adapt and problem solve to meet that objective. It's quite simple, and ingenious if it works as Scoutible claims. I can't wait to hear more about it.
Gaming versus gamification
Scoutible's approach makes sense for their target audience and use case. At one point in Secure Code Warrior's journey, we considered the value of a full gaming platform, or mini games built into the training, but in the end that angle didn't really add enough value for our purposes. The end users who take our security training know they are supposed to be learning.
Within our Secure Code Warrior platform, we measure the secure coding skills of a software developer while using game-based elements to keep them engaged. That means keeping these questions in mind:
- Do they understand the most common software security weaknesses?
- Can they fix common security bugs using framework specific security functions?
- Are they confident about their software security skills?
- What are their strengths and skills gaps in terms of secure code?
Caring by design
There's another reason I can relate strongly with Scoutible's product. Not only is it a benefit to the hiring company, but also to the candidate. Not all strong candidates you'll encounter are good at interviewing. For some, it's just not in their personalities. For others, they might never have been taught the fine art of interviewing, or maybe they're new to the workforce and this is their first interview.
This is where I see a similarity with software developers. Sadly, there just isn't a focus on security in many university programs. Aspiring developers are told "You'll learn it on the job." They leave school knowing how to make their code work, but they unknowingly perpetuate all of the same vulnerabilities that we've been fighting against for 20 or more years.
When developers do get that job and ask to learn about security, they have even less time than when they were in school. They're paid to produce functional, effective software, and many of the developer security training courses ... well, they're boring. Let's be honest.
What if you could get your developers, new and old, to care about security without really thinking about it? How do you make training interesting, engaging, and even fun, while also still being effective?
That's our challenge, and just like Scoutible's, it's a very real one. Just because the problem is incredibly serious doesn't mean the solution has to be mundane and boring. We've tried that already. We prefer to inject a little fun, excitement, competition, and engagement into our solution. So far, it's worked very, very well.
I thought if we could build a tool that felt like a game, and incorporated tests for the appropriate personality and cognitive attributes, we could address many of the problems I'd been studying.
https://www.inc.com/kevin-j-ryan/scoutible-video-game-reinventing-the-hiring-process.html
Table des matières
Chief Executive Officer, Chairman, and Co-Founder

Secure Code Warrior est là pour aider votre organisation à sécuriser le code tout au long du cycle de développement logiciel et à créer une culture dans laquelle la cybersécurité est une priorité. Que vous soyez responsable de la sécurité des applications, développeur, responsable de la sécurité informatique ou toute autre personne impliquée dans la sécurité, nous pouvons aider votre organisation à réduire les risques associés à un code non sécurisé.
Réservez une démoTéléchargerRessources pour vous aider à démarrer
Ressources pour vous aider à démarrer
Secure Code Warrior named twice in the Gartner Hype Cycle for secure software engineering
Gartner names SCW twice. As AI agents take over more development, SCW gives you the capability and governance to adopt AI-driven development securely.
Secure coding learning that reflects real AI usage
Align secure coding training to real AI development activity — automatically assigning guidance to developers using AI tools, without manual intervention.Align secure coding training to real AI development activity — automatically assigning guidance to developers using AI tools, without manual intervention.
Train developers on the real risks in their code, whether human-written or AI-generated
Adaptive Learning auto-assigns targeted secure coding training to the developers introducing real vulnerabilities, reducing recurring risks at the source.Secure Code Warrior blog banner with a blue overlay over a developer working at a multi-monitor desk displaying code, alongside the headline 'Train developers on the real risks in their code.'l



