Senior Software Developer at a insurance company with 10,001+ employees
Real User
May 7, 2022
Veracode Security Labs is very good for providing examples of code vulnerabilities in a developer’s chosen language. This is important because if a flaw is found, then they provide me with a few examples of how to implement it. I don't need to go to Google and try to figure it out myself. They already provide me with some good quality examples that I can use to implement the fix.
The hands-on training has helped us to tackle modern threats by coding with vulnerabilities in mind from the beginning of a project. It has improved our process overall, and the number of vulnerabilities has been reduced.
The best part is that this is all within the web browser, so the developer doesn't have to install any development environments or download anything to work through the training.
Veracode Security Labs shifts application security knowledge left, training developers to tackle modern threats in the evolving cybersecurity landscape by exploiting and patching real code, and applying DevSecOps principles to deliver secure code on time. Through hands-on labs that use modern web apps written in your chosen languages, developers learn the skills and strategies that are directly applicable to an organization's code. With detailed progress reporting, email assignments, and a...
I like the end-to-end learning experience. That also includes SAST. It has a low false positive rate.
Veracode Security Labs is very good for providing examples of code vulnerabilities in a developer’s chosen language. This is important because if a flaw is found, then they provide me with a few examples of how to implement it. I don't need to go to Google and try to figure it out myself. They already provide me with some good quality examples that I can use to implement the fix.
The hands-on training has helped us to tackle modern threats by coding with vulnerabilities in mind from the beginning of a project. It has improved our process overall, and the number of vulnerabilities has been reduced.
It provides a complete review of vulnerabilities & possible fixes for OWASP Top 10 in one place.
The features are so extensive, which is why they are ahead of the game, and the reason I continue to use this solution.
The best part is that this is all within the web browser, so the developer doesn't have to install any development environments or download anything to work through the training.
The coding challenges were well put together and I was happy to see some of the challenges even had a built-in web browser.