Secure code training for small business buyers
Asked as “secure code training platform”, and as “developer security training”, on behalf of a small B2B company. 47 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each. Added to the September 2026 Edition; its answers are read by the distilled judge (ai-indexes-judge-qwen3-14b-run3), not the claude-opus-5 judge of the earlier categories: how the two compare.
Standing · first-choice share
26%
Contested · Snyk Learn 15%
26SecureFlag15Snyk Learn13SafeStack Academy47others
26% of first choices, contested.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03A04
05
06Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01SecureFlag26%
SecureFlag26%02Snyk Learn15%
Snyk Learn15%03SafeStack Academy13%
SafeStack Academy13%04Avatao9%
05Security Journey9%
Security Journey9%06Secure Code Warrior4%
Secure Code Warrior4%What they warned about
One of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.1 Fast, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Secure Code Warrior53%
25 of 47 labels negative · 10 of 12 models · 5 hard negative
“Secure Code Warrior — ⚠️ High Risk for SMBs ... This is built for enterprise-scale teams with AppSec budgets — not small businesses” DeepSeek V4 Flash, negative prompt
Security Journey18%
6 of 33 labels negative · 6 of 12 models · 2 hard negative
“**2. Security Journey** - **Issues reported:** Users have cited a "steep learning curve" due to a lack of hands-on exercises” Mistral Small, negative prompt
SANS80%
4 of 5 labels negative · 3 of 12 models · 2 hard negative
“avoid enterprise-tier secure coding platforms** (like *Secure Code Warrior*, *SANS*, or *Codebashing*)” Gemini 3.5 Flash, budget prompt
Veracode75%
3 of 4 labels negative · 3 of 12 models · 2 hard negative
“Avoid enterprise platforms like Secure Code Warrior or Veracode unless you have 50+ developers” Kimi K2, direct prompt
What they cite
Citations exist only for the models that return a source list: fourteen of the twelve in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
77 of 84 answers in this category came back with a source list, from 14 of 12 models: citations where the model returns them, or the search results it consulted. 1036 links across 146 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · SourceForge49 answers · 110 citations · 12 models
vendor site · RansomLeak45 answers · 45 citations · 11 models
vendor site · G239 answers · 98 citations · 13 models
vendor site · FitGap39 answers · 43 citations · 11 models
vendor site · Security Journey38 answers · 65 citations · 14 models
36 answers · 43 citations · 11 models
31 answers · 36 citations · 10 models
26 answers · 28 citations · 9 models
vendor site · Secure Code Warrior25 answers · 38 citations · 10 models
vendor site · SecureFlag24 answers · 30 citations · 10 models
23 answers · 26 citations · 12 models
vendor site · Top 10 Dev Training19 answers · 22 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
45 answers · 11 models
38 answers · 11 models
32 answers · 10 models
31 answers · 11 models
27 answers · 10 models
23 answers · 12 models
19 answers · 10 models
19 answers · 10 models
18 answers · 7 models
17 answers · 8 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best secure code training platform”, “secure code training platform”, “secure code training platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| SecureFlag secureflag.com | 26% | 155 | 480 | 0 | 935 | $94 | 8 | 8 |
| Snyk snyk.io Snyk Learn 15% | 15% | 55 | 12,100 | 581 | 61,651 company | 60 | ||
| SafeStack Academy safestack.io | 13% | 51 | 10 | 0 | 92 | 1 | ||
| Avatao | 9% | 40 | 0 | |||||
| Security Journey securityjourney.com | 9% | 118 | 390 | 8 | 1,490 | 10 | 5 | |
| SANS sans.org SANS Developer Security Awareness Training 4% | 4% | 4 | 201,000 | 2,165,150 | 703,543 company | 81 | ||
| Secure Code Warrior securecodewarrior.com | 4% | 149 | 1,000 | 22 | 2,802 | 7 | 2 | |
| Hacksplaining hacksplaining.com | 2% | 9 | ||||||
| PortSwigger Web Security Academy portswigger.net | 2% | 13 | 1,000 | 4 | 89,623 | |||
| OWASP resources | 2% |
Google's top ten for the three searches hold 21 sites; 4 of them are among the sites the models cited here (blog.secureflag.com, gartner.com, securecodewarrior.com, securityjourney.com). The first result for “best secure code training platform” is safestack.io.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best secure code training platform for a small B2B company?”Paraphrase“Which developer security training would you recommend to a small business that sells to other businesses?”Comparative“What are the top secure code training platforms for a small team and how do they differ?”Budget-constrained“What is the best secure code training platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a secure code training platform. What should we look at?”Negative“Which secure code training platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5Secure Code WarriorOWASP TrainingChangedCode Review LabSafeStack Academyno first choiceagainst: SecureFlag, Snyk Learn
Three alternatives
Avatao, Kontra, Security JourneyThree alternatives
Pluralsight, SANS OnDemand Courses, UdemyTwo alternatives
RansomLeak, Secure Code WarriorThree alternatives
Avatao, HackEDU, Snyk LearnGPT-5.4 miniSecureFlagno first choiceChangedSecure Code WarriorSecureFlagno first choiceagainst: Secure Code Warrior
Two alternatives
Codebashing, Secure Code WarriorThree alternatives
SANS Developer Security Training, SecureFlag, Security JourneyTwo alternatives
OWASP Secure Coding Dojo, ThreatCanvasGemini 3.5 FlashSecureFlagSafeStack AcademyChangedSecureFlagThe Linux Foundation & OpenSSF: LFD121against: Codebashing, SANS, Secure Code WarriorSnyk Learnagainst: Secure Code Warrioragainst: LinkedIn Learning, OWASP Foundation, OpenText Fortify, PortSwigger Web Security Academy, SANS Developer Security Training, Secure Code Warrior, Snyk Learn, Veracode
Five alternatives
AppSecEngineer, OWASP Secure Coding Dojo, SafeStack Academy, Secure Code Warrior, Semgrep AcademyThree alternatives
AppSecEngineer, SecureFlag, Snyk LearnFour alternatives
AppSecEngineer, SafeStack Academy, SecDim, Snyk LearnFour alternatives
Hacksplaining, OWASP Juice Shop, PortSwigger Web Security Academy, Snyk LearnFour alternatives
AppSecEngineer, SecureFlag, Security Journey, WizerPerplexity SonarSnyk LearnSecureFlag, Security JourneyChangedSnyk LearnSecure Code Warriorno first choiceagainst: Checkmarx Codebashing, Cybrary, Pluralsight, Veracode Security Labs
Three alternatives
Codebashing, Secure Code Warrior, Veracode Security LabsThree alternatives
Microsoft’s DevSecOps training guidance, SANS Developer Security Training, Veracode Developer TrainingFive alternatives
Avatao, Secure Code Warrior, SecureFlag, Security Journey, Veracode Security LabsOne alternative
Veracode Developers TrainingGrok 4.1 FastSecureFlagTop 10 Dev TrainingChangedagainst: KnowBe4, SANS Developer Awareness, Security JourneyCodebashing, SecureFlagagainst: Secure Code WarriorSnyk Learnagainst: Secure Code Warrior, Veracodeno first choiceagainst: Secure Code Warrior
Two alternatives
Secure Code Warrior, Snyk LearnThree alternatives
Avatao, Practical DevSecOps, SecureFlagTwo alternatives
Avatao, Immersive LabsFour alternatives
Hacksplaining, OWASP resources, SafeStack Academy, SecureFlagThree alternatives
Secure Code Warrior, SecureFlag, Security JourneyMistral SmallAvatao, SecureFlagSANS Developer Security Awareness TrainingChangedSnyk Learn, WizerSnyk Learnno first choiceagainst: Secure Code Warrior, Security Journey
Two alternatives
CMD+CTRL Training, Checkmarx CodebashingTwo alternatives
FitGap, Security JourneyTwo alternatives
Avatao, SecureFlagTwo alternatives
Hacksplaining for Teams, SecureFlag Secure Coding TrainingDeepSeek V4 FlashSecurity JourneySecureFlagChangedagainst: Secure Code WarriorSnyk LearnSecureFlagagainst: Secure Code WarriorSecureFlagagainst: Secure Code Warrioragainst: Black Duck Polaris Platform, Checkmarx Codebashing, SANS, Secure Code Warrior, Security Journey, Veracode Security Labs
Three alternatives
Secure Code Warrior, SecureFlag, Snyk LearnThree alternatives
HackTheBox Academy, PortSwigger Web Security Academy, SANS Securing Web ApplicationsFour alternatives
Avatao, Secure Code Warrior, SecureFlag, Security JourneyOne alternative
SafeStack AcademyThree alternatives
Hacksplaining, SafeStack Academy, Security JourneyLlama 4 MaverickAvataono first choiceChangedno first choiceSnyk Learnno first choicenothing named
Two alternatives
Secure Code Warrior Learning Platform, WizerTwo alternatives
Hacksplaining for Teams, SecureFlag Secure Coding TrainingQwen 3.7 FlashSecurity Journeyagainst: Secure Code WarriorAvataoChangedSecureFlagAvataono first choiceagainst: Avatao, Black Duck, Secure Code Warrior
One alternative
AvataoTwo alternatives
Anagram Security, SecureFlagThree alternatives
Immersive Labs, Kontra, SANS Security AwarenessFive alternatives
CodeReview Lab, DVWA, OWASP, SecureFlag, WebGoatKimi K2SafeStack Academyagainst: Secure Code Warrior, VeracodeSafeStack AcademyHeldagainst: Avatao, Secure Code WarriorSecureFlagagainst: Secure Code WarriorHacksplainingagainst: Checkmarx Codebashing, Kontra, SANS, Secure Code WarriorSecureFlagagainst: Codebashing, KnowBe4, Kontra, SANS, Secure Code Warrior, Security Journey
Four alternatives
Avatao, Security Journey, Snyk Learn, WizerTwo alternatives
SecureFlag, Semgrep AcademyTwo alternatives
Kontra, SafeStack AcademyOne alternative
WizerThree alternatives
Avatao, Secure Code Warrior, Security JourneyGLM 4.7 FlashXSafeStack AcademyOWASPChangedHacksplaining for Teams, Secure Code WarriorPortSwigger Web Security Academyagainst: Secure Code Warrior, SecureFlag, Security Journeyno first choiceagainst: Secure Code Warrior
Four alternatives
Avatao, Kontra, SecureFlag, Security JourneyFour alternatives
Offensive360 - Secure Coding Fundamentals, Pluralsight - Security Champion for Developers, SANS Institute - Developer Security Awareness Training, Veracode Security LabsThree alternatives
Checkmarx Codebashing, Kontra, Veracode Security LabsThree alternatives
OWASP Secure Coding Dojo, SafeStack Academy, Snyk LearnMiniMax M2.5SafeStack AcademySANS Developer Security Awareness TrainingChangedSecureFlagCybrary, OWASP resourcesno first choiceagainst: Secure Code Warrior, Security Journey
Two alternatives
SecureFlag, Security JourneyTwo alternatives
Secure Code Warrior, Security JourneyThree alternatives
Hacksplaining for Teams, Secure Code Warrior, Security JourneyThree alternatives
Hacksplaining, PentesterLab, SecureFlagBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:04 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:29 | yes | 3 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:22 | yes | 17 | 29 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-05 00:40 | yes | 16 | 3 s |
| Direct recommendation | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:44 | yes | 22 | 10 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:45 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 22:38 | yes | 21 | 30 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:41 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:41 | yes | 9 | 36 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:24 | yes | 10 | 26 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:27 | yes | 22 | 87 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 23:04 | yes | 23 | 30 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:31 | no | 0 | 4 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:15 | no | 0 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:38 | yes | 14 | 24 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 00:45 | yes | 18 | 3 s |
| Paraphrase | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:20 | yes | 21 | 9 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:50 | yes | 5 | 3 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:16 | yes | 24 | 34 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 22:32 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:14 | yes | 9 | 34 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:39 | yes | 19 | 17 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:14 | yes | 14 | 30 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:25 | yes | 5 | 24 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:23 | yes | 9 | 9 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:56 | yes | 4 | 5 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 23:23 | yes | 21 | 26 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-05 00:25 | yes | 19 | 5 s |
| Comparative | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:36 | yes | 21 | 11 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:13 | yes | 23 | 12 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:14 | yes | 21 | 38 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:55 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:17 | yes | 22 | 42 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:13 | yes | 24 | 38 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:48 | yes | 19 | 22 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:42 | yes | 12 | 15 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:25 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:22 | yes | 2 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:17 | yes | 20 | 30 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-05 01:46 | yes | 15 | 2 s |
| Budget constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 22:57 | yes | 18 | 7 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:53 | yes | 5 | 3 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:44 | yes | 21 | 40 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:06 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:59 | yes | 10 | 22 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:30 | yes | 23 | 44 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:37 | yes | 24 | 242 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:32 | yes | 5 | 18 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:03 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:37 | no | 0 | 7 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:40 | yes | 12 | 26 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-04 23:12 | yes | 16 | 5 s |
| Scale constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:08 | yes | 13 | 7 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:11 | no | 0 | 6 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:53 | yes | 22 | 52 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:40 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:46 | yes | 5 | 28 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:52 | yes | 23 | 26 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:57 | no | 0 | 54 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 23:25 | yes | 5 | 13 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:42 | yes | 15 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:08 | yes | 3 | 5 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:52 | yes | 17 | 29 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-05 01:46 | yes | 18 | 3 s |
| Negative framing | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:31 | yes | 23 | 8 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:10 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:14 | yes | 19 | 46 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:48 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:08 | yes | 15 | 52 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:54 | yes | 23 | 44 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 22:14 | yes | 23 | 35 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:07 | yes | 19 | 37 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Checkmarx read as Checkmarx Codebashing
SafeStack read as SafeStack Academy
SafeStack (by NINJIO) read as SafeStack Academy
Veracode Secure Code Training read as Veracode Security Labs
Veracode Training read as Veracode Security Labs
Unresolved, counted raw
CodeReview Lab
CodeSecure
Free interactive secure coding exercises on GitHub
HackTheBox Academy
LinkedIn Learning
Linux Foundation LFD121 (Developing Secure Software)
Microsoft’s DevSecOps training guidance
Mozilla Observatory
OWASP Security Training for SOC 2
OWASP Top 10 Proactive Controls
OWASP.org
Offensive360 - Secure Coding Fundamentals
PentesterLab
Pluralsight - Security Champion for Developers
PortSwigger labs
RansomLeak Training Application Security
SANS Developer Awareness
SANS Institute - Developer Security Awareness Training
SANS Institute's Developer Security Awareness Training
SANS Institute's Hands-on Developer Security Training
SANS OnDemand Courses
SANS Securing Web Applications
SecureCodeCards
The Linux Foundation & OpenSSF: LFD121 ("Developing Secure Software")
ThreatCanvas
Veracode Developer Enablement eLearning
Veracode Developers Training
Veracode's Developers Training
VulnLearn
Discontinued, still offered
No shut-down product was recommended here.