Secure code training for enterprise buyers
Asked as “secure code training platform”, and as “developer security training”, on behalf of an enterprise B2B company. 49 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each. Added to the September 2026 Edition; its answers are read by the distilled judge (ai-indexes-judge-qwen3-14b-run3), not the claude-opus-5 judge of the earlier categories: how the two compare.
Standing · first-choice share
33%
Contested · SecureFlag 22%
33Secure Code Warrior22SecureFlag18Security Journey27others
33% of first choices, contested.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the two products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01Secure Code Warrior33%
Secure Code Warrior33%02SecureFlag22%
SecureFlag22%03Security Journey18%
Security Journey18%04SafeStack Academy4%
SafeStack Academy4%05Veracode Security Labs2%
Veracode Security Labs2%06Checkmarx Codebashing2%
Checkmarx Codebashing2%07AppSecEngineer0%
AppSecEngineer0%08Codebashing0%
Codebashing0%What they warned about
One of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.1 Fast, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Secure Code Warrior20%
11 of 55 labels negative · 9 of 12 models · 4 hard negative
“Multiple user reports describe the platform as having "fake scenarios," "shitty code samples," a "confusing interface," and "patronizing language."” Mistral Small, negative prompt
Security Journey12%
6 of 48 labels negative · 5 of 12 models · 1 hard negative
“Often compared unfavorably in bake-offs... Video-heavy content lacks depth in interactive labs” Grok 4.1 Fast, negative prompt
Veracode Security Labs17%
4 of 23 labels negative · 4 of 12 models · 2 hard negative
“Vendor lock-in if not already using Veracode; brand split from legacy tools reduces recognition. High costs for non-Veracode users” Grok 4.1 Fast, negative prompt
SecureFlag5%
3 of 60 labels negative · 3 of 12 models
“Tests and challenges have been stricter than what is covered in the learning modules, which can be frustrating for users” Claude Haiku 4.5, negative prompt
What they cite
Citations exist only for the models that return a source list: fourteen of the twelve in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
81 of 84 answers in this category came back with a source list, from 14 of 12 models: citations where the model returns them, or the search results it consulted. 1055 links across 160 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · Security Journey50 answers · 107 citations · 14 models
vendor site · RansomLeak45 answers · 45 citations · 11 models
vendor site · G242 answers · 81 citations · 13 models
vendor site · SecureFlag42 answers · 58 citations · 11 models
vendor site · Secure Code Warrior40 answers · 65 citations · 13 models
vendor site · SourceForge38 answers · 62 citations · 10 models
37 answers · 43 citations · 11 models
vendor site · FitGap35 answers · 38 citations · 11 models
31 answers · 40 citations · 10 models
vendor site · SecureFlag20 answers · 22 citations · 9 models
vendor site · AppSecEngineer18 answers · 27 citations · 7 models
vendor site · Veracode15 answers · 29 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
44 answers · 11 models
36 answers · 11 models
33 answers · 13 models
32 answers · 10 models
32 answers · 11 models
23 answers · 10 models
22 answers · 9 models
21 answers · 10 models
21 answers · 10 models
19 answers · 9 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best secure code training platform”, “secure code training platform”, “secure code training platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Secure Code Warrior securecodewarrior.com Secure Code Warrior 33%, Secure Code Warrior Learning Platform 4% | 37% | 149 | 1,000 | 22 | 2,802 | 7 | 2 | |
| SecureFlag secureflag.com | 22% | 155 | 480 | 0 | 935 | $94 | 8 | 8 |
| Security Journey securityjourney.com | 18% | 118 | 390 | 8 | 1,490 | 10 | 5 | |
| SafeStack Academy safestack.io | 4% | 51 | 10 | 0 | 92 | 1 | ||
| Veracode veracode.com Veracode Security Labs 2%, Veracode Developer Training 2%, Veracode 0% | 4% | 48 | 4,400 | 194 | 12,543 company | 17 | 6 | |
| CMD+CTRL Training | 2% | 0 | ||||||
| Checkmarx checkmarx.com Checkmarx Codebashing 2% | 2% | 26 | 30 | 1 | 54,982 company | 61 | 3 | |
| Anagram Security | 2% | |||||||
| Code Review Lab | 2% | |||||||
| SANS sans.org SANS Developer Security Training 2% | 2% | 10 | 201,000 | 2,165,150 | 703,543 company | 81 |
Google's top ten for the three searches hold 21 sites; 6 of them are among the sites the models cited here (blog.secureflag.com, gartner.com, securecodewarrior.com, secureflag.com, securityjourney.com, veracode.com). The first result for “best secure code training platform” is safestack.io.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best secure code training platform for an enterprise B2B company?”Paraphrase“Which developer security training would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade secure code training platforms and how do they differ?”Budget-constrained“What is the best secure code training platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a secure code training platform. What should we look at?”Negative“Which secure code training platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5Secure Code WarriorSecure Code Warrior Learning PlatformChangedno first choiceCode Review Lab, SafeStack AcademySecure Code Warrioragainst: Avatao, SecureFlag, Security Journey
Three alternatives
AppSecEngineer, SecureFlag, Veracode Security LabsTwo alternatives
AppSecEngineer, Security CompassTwo alternatives
Secure Code Warrior, SecureFlagGPT-5.4 miniSecure Code WarriorOWASP's Application Security Curriculum and Developer GuideChangedSecure Code Warrioragainst: SecureFlagSecurity Journeyagainst: Secure Code WarriorSecureFlagnothing named
Three alternatives
OWASP Secure Coding Dojo, OWASP VulnCodeLab, SecureFlagOne alternative
OWASP Secure Coding DojoTwo alternatives
Codebashing, Veracode Security LabsGemini 3.5 FlashSecure Code Warrior, SecureFlagSecure Code WarriorChangedSecure Code Warrior, SecureFlagSecurity Journeyno first choicenothing named
Two alternatives
AppSecEngineer, Security JourneyFive alternatives
AppSecEngineer, Checkmarx Codebashing, SecureFlag, Security Journey, Veracode Security LabsFour alternatives
AppSecEngineer, Security Journey, Snyk Learn, Veracode Security LabsThree alternatives
AppSecEngineer, Secure Code Warrior, SecureFlagPerplexity SonarSecure Code WarriorVeracode Developer TrainingChangedno first choiceSecure Code Warrioragainst: Veracode Security Labsno first choiceagainst: G2 Community Mode / free picked labs, GitHub Copilot, OWASP Juice Shop, OWASP SKF, Pluralsight
Three alternatives
SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
SANS Developer Security Training, SecureFlagTwo alternatives
SecureFlag, Security JourneyGrok 4.1 FastSecure Code WarriorCheckmarx CodebashingChangedagainst: SANS Developer Security TrainingSecure Code WarriorSecureFlagagainst: Black Duck, Checkmarx Codebashing, KnowBe4, SafeStack Academy, Secure Code Warrior, Security JourneySecurity Journeyagainst: Secure Code Warrior, Security Journey, Snyk Learn, Veracode Security Labs
Four alternatives
CMD+CTRL Training, SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
Practical DevSecOps, SecureFlagFour alternatives
SafeStack Academy, SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
PortSwigger Academy, Snyk LearnThree alternatives
AppSecEngineer, Avatao, SecureFlagMistral SmallCMD+CTRL TrainingSANS Developer Security Training, SecureFlagChangedSecure Code Warrioragainst: SANSSecureFlag, Security Journeyno first choiceagainst: Secure Code Warrior
Two alternatives
Secure Code Warrior, Security JourneyOne alternative
CodebashingFour alternatives
CMD+CTRL Training, SafeStack Academy, Security Journey, Veracode Security LabsOne alternative
SafeStack AcademyDeepSeek V4 FlashSecure Code WarriorSecure Code WarriorHeldSecure Code Warrior, SecureFlagSecure Code Warriorno first choiceagainst: Codebashing, Coursera for Business, KnowBe4, Pluralsight Security Paths, SANS Security Awareness, Secure Code Warrior, Security Journey, Udemy
Three alternatives
SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
SecureFlag, Security JourneyThree alternatives
Codebashing, Security Journey, Veracode Security LabsTwo alternatives
SecureFlag, Security JourneyLlama 4 MaverickVeracode Security Labsno first choiceChangedno first choiceno first choiceno first choicenothing named
Three alternatives
CMD+CTRL Training, Secure Code Warrior Learning Platform, WizerQwen 3.7 FlashSecurity JourneySecure Code WarriorChangedagainst: SANS TechnologySecure Code WarriorSecure Code Warriorno first choiceagainst: Secure Code Warrior, Security Journey
Three alternatives
Kontra + Courses, SecureStack, Veracode Security LabsTwo alternatives
Pluralsight "Secure Ready", SecureFlagTwo alternatives
Hack The Box (HTB) Academy, SANS Technology InstituteTwo alternatives
DevRevOps, SANSKimi K2SecureFlagSecurity JourneyChangedSecure Code Warrioragainst: HackerRank for WorkSecureFlagagainst: Secure Code Warriorno first choiceagainst: Secure Code Warrior, Security Journey
Two alternatives
Secure Code Warrior, Security JourneyThree alternatives
Secure Code Warrior, SecureFlag, Snyk LearnFive alternatives
Checkmarx Codebashing, Immersive Labs, SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
Security Compass, Veracode Security LabsGLM 4.7 FlashXSecurity JourneySecureFlagChangedSecurity Journeyagainst: Hacksplaining for TeamsSecureFlagno first choiceagainst: Arctic Wolf, RansomLeak, Secure Code Warrior, Veracode Security Labs
Five alternatives
Checkmarx Codebashing, SafeStack Academy, Secure Code Warrior, SecureCodingHub, SecureFlagThree alternatives
CMD+CTRL Training, SANS Security Awareness, Security JourneyThree alternatives
AppSecEngineer, Secure Code Warrior, SecureFlagOne alternative
Secure Code WarriorMiniMax M2.5SecureFlag, Security JourneyAnagram SecurityChangedSecure Code Warrior, SecureFlag, Security JourneySoftware Securedagainst: Secure Code Warrior, SecureFlagno first choicenothing named
Two alternatives
Codebashing, Secure Code WarriorTwo alternatives
Kontra, SecureFlagOne alternative
Herd SecurityBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:25 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:33 | yes | 3 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:03 | yes | 8 | 24 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-04 23:07 | yes | 17 | 2 s |
| Direct recommendation | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:31 | yes | 18 | 10 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:17 | yes | 5 | 3 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:53 | yes | 20 | 49 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:48 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:26 | yes | 16 | 40 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:06 | yes | 14 | 22 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:17 | yes | 21 | 32 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:31 | yes | 5 | 13 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:54 | yes | 18 | 10 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:31 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 23:29 | yes | 10 | 19 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 01:40 | yes | 18 | 3 s |
| Paraphrase | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:04 | yes | 20 | 9 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:21 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:43 | yes | 23 | 31 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:26 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:55 | yes | 9 | 35 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 22:25 | yes | 23 | 47 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:50 | yes | 13 | 34 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:27 | yes | 5 | 18 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:18 | yes | 13 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:28 | yes | 7 | 10 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:43 | yes | 22 | 35 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-05 01:05 | yes | 16 | 4 s |
| Comparative | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:35 | yes | 17 | 13 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:00 | yes | 9 | 10 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:55 | yes | 22 | 81 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 22:53 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:39 | no | 0 | 35 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:20 | yes | 23 | 30 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:31 | yes | 15 | 191 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 23:29 | yes | 23 | 35 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:27 | yes | 15 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:29 | yes | 3 | 8 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:28 | yes | 17 | 29 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-05 00:16 | yes | 15 | 5 s |
| Budget constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 22:46 | yes | 18 | 11 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:37 | yes | 9 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:40 | yes | 23 | 25 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:54 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:17 | no | 0 | 28 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:43 | yes | 19 | 31 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:25 | yes | 20 | 51 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:29 | yes | 16 | 43 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:28 | yes | 23 | 14 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:21 | yes | 3 | 11 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:04 | yes | 6 | 25 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-04 23:28 | yes | 17 | 6 s |
| Scale constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 23:47 | yes | 19 | 10 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:06 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:01 | yes | 21 | 53 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:16 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:54 | yes | 10 | 35 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:30 | yes | 23 | 28 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:34 | yes | 12 | 35 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:49 | yes | 9 | 53 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:50 | yes | 16 | 10 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 23:58 | yes | 4 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:09 | yes | 10 | 33 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-05 00:19 | yes | 19 | 6 s |
| Negative framing | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:13 | yes | 20 | 13 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:22 | yes | 12 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:54 | yes | 16 | 60 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:10 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:13 | yes | 9 | 30 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:32 | yes | 24 | 34 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:14 | yes | 23 | 56 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:25 | yes | 6 | 28 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Checkmarx read as Checkmarx Codebashing
SafeStack read as SafeStack Academy
Veracode Secure Code Training read as Veracode Security Labs
Unresolved, counted raw
Anagram
Aspen: Adapt
Codebash
Coursera for Business
DevRevOps
G2 Community Mode / free picked labs
Hack The Box (HTB) Academy
HackerRank for Work
Herd Security
OWASP SKF
OWASP VulnCodeLab
OWASP's Application Security Curriculum and Developer Guide
Pluralsight "Secure Ready"
Pluralsight Security Paths
SANS Technology
SANS Technology Institute
Secure Code Training Software
SecureStack
Discontinued, still offered
No shut-down product was recommended here.