Secure code training for enterprise buyers
Asked as “secure code training platform”, and as “developer security training”, on behalf of an enterprise B2B company. 49 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the October 2026 Edition on October 4, 2026.
Standing · first-choice share
37%
Contested · SecureFlag 22%
37Secure Code Warrior Learning Platform22SecureFlag18Security Journey22others
37% of first choices, contested.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for an enterprise B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the two products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
SecureFlag vs Secure Code Warrior Learning PlatformSecureFlag vs SafeStack AcademySecureFlag vs Security Journey
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not enterprise.All ten head-to-head pages: the top five products, each against each
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08
09Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01Secure Code Warrior Learning Platform37%
Secure Code Warrior Learning Platform37%02SecureFlag22%
SecureFlag22%03Security Journey18%
Security Journey18%04SafeStack Academy4%
SafeStack Academy4%05Veracode Security Labs2%
Veracode Security Labs2%06Checkmarx Codebashing2%
Checkmarx Codebashing2%07SANS Developer Security Training2%
SANS Developer Security Training2%08AppSecEngineer0%
AppSecEngineer0%09Codebashing0%
Codebashing0%What they warned about
Four of fourteen models held their first choice under the paraphrase. GPT-5.4 mini, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Mistral Small, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Secure Code Warrior Learning Platform19%
11 of 58 labels negative · 9 of 14 models · 4 hard negative
“Multiple user reports describe the platform as having "fake scenarios," "shitty code samples," a "confusing interface," and "patronizing language."” Mistral Small, negative prompt
Security Journey12%
6 of 48 labels negative · 5 of 14 models · 1 hard negative
“Often compared unfavorably in bake-offs... Video-heavy content lacks depth in interactive labs” Grok 4.20, negative prompt
Veracode Security Labs17%
4 of 23 labels negative · 4 of 14 models · 2 hard negative
“Vendor lock-in if not already using Veracode; brand split from legacy tools reduces recognition. High costs for non-Veracode users” Grok 4.20, negative prompt
SANS Developer Security Training30%
3 of 10 labels negative · 3 of 14 models
“Highly respected for depth and quality, but can be more expensive and less flexible than other options.” Mistral Small, comparative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
81 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 1055 links across 160 sites, every framing counted. Ranked by the number of answers carrying the site or page. None of the 252 answers across every segment cited this index's own page for the category.
vendor site · Security Journey50 answers · 107 citations · 14 models
vendor site · RansomLeak45 answers · 45 citations · 11 models
vendor site · G242 answers · 81 citations · 13 models
vendor site · SecureFlag42 answers · 58 citations · 11 models
vendor site · Secure Code Warrior40 answers · 65 citations · 13 models
vendor site · SourceForge38 answers · 62 citations · 10 models
37 answers · 43 citations · 11 models
vendor site · FitGap35 answers · 38 citations · 11 models
31 answers · 40 citations · 10 models
vendor site · SecureFlag20 answers · 22 citations · 9 models
vendor site · AppSecEngineer18 answers · 27 citations · 7 models
vendor site · Veracode15 answers · 29 citations · 8 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
44 answers · 11 models
36 answers · 11 models
33 answers · 13 models
32 answers · 10 models
32 answers · 11 models
23 answers · 10 models
22 answers · 9 models
21 answers · 10 models
21 answers · 10 models
19 answers · 9 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best secure code training platform”, “secure code training platform”, “secure code training platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Secure Code Warrior Learning Platform securecodewarrior.com | 37% | 179 | 2,802 | 7 | 2 | |||
| SecureFlag secureflag.com | 22% | 135 | 480 | 0 | 935 | $94 | 8 | 8 |
| Security Journey securityjourney.com | 18% | 103 | 390 | 8 | 1,490 | 10 | 5 | |
| SafeStack Academy safestack.io | 4% | 41 | 10 | 0 | 92 | 1 | ||
| Veracode veracode.com Veracode Security Labs 2%, Veracode Developer Training 2%, Veracode 0% | 4% | 64 | 4,400 | 194 | 12,543 company | 17 | 6 | |
| CMD+CTRL Training | 2% | 0 | ||||||
| Checkmarx checkmarx.com Checkmarx Codebashing 2% | 2% | 47 | 30 | 1 | 54,982 company | 61 | 3 | |
| SANS sans.org SANS Developer Security Training 2% | 2% | 26 | 201,000 | 2,165,150 | 703,543 company | 81 | ||
| Anagram Security | 2% | |||||||
| Code Review Lab | 2% |
Google's top ten for the three searches hold 21 sites; 6 of them are among the sites the models cited here (blog.secureflag.com, gartner.com, securecodewarrior.com, secureflag.com, securityjourney.com, veracode.com). The first result for “best secure code training platform” is safestack.io.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best secure code training platform for an enterprise B2B company?”Paraphrase“Which developer security training would you recommend to a large B2B company with thousands of employees?”Comparative“What are the top enterprise-grade secure code training platforms and how do they differ?”Budget-constrained“What is the best secure code training platform for a large company that needs predictable total cost across thousands of users?”Scale-constrained“We are a 5,000 person company with SSO, SOC 2 and procurement review requirements evaluating a secure code training platform. What should we look at?”Negative“Which secure code training platforms should a large enterprise avoid or be cautious about?”
Claude Haiku 4.5Secure Code Warrior Learning PlatformSecure Code Warrior Learning PlatformHeldno first choiceCode Review Lab, SafeStack AcademySecure Code Warrior Learning Platformagainst: Avatao, SecureFlag, Security Journey
Three alternatives
AppSecEngineer, SecureFlag, Veracode Security LabsTwo alternatives
AppSecEngineer, Security CompassTwo alternatives
Secure Code Warrior Learning Platform, SecureFlagGPT-5.4 miniSecure Code Warrior Learning PlatformOWASP's Application Security Curriculum and Developer GuideChangedSecure Code Warrior Learning Platformagainst: SecureFlagSecurity Journeyagainst: Secure Code Warrior Learning PlatformSecureFlagnothing named
Three alternatives
OWASP Secure Coding Dojo, OWASP VulnCodeLab, SecureFlagOne alternative
OWASP Secure Coding DojoTwo alternatives
Codebashing, Veracode Security LabsGemini 3.5 FlashSecure Code Warrior Learning Platform, SecureFlagSecure Code Warrior Learning PlatformChangedSecure Code Warrior Learning Platform, SecureFlagSecurity Journeyno first choicenothing named
Two alternatives
AppSecEngineer, Security JourneyFive alternatives
AppSecEngineer, Checkmarx Codebashing, SecureFlag, Security Journey, Veracode Security LabsFour alternatives
AppSecEngineer, Security Journey, Snyk Learn, Veracode Security LabsThree alternatives
AppSecEngineer, Secure Code Warrior Learning Platform, SecureFlagPerplexity SonarSecure Code Warrior Learning PlatformVeracode Developer TrainingChangedno first choiceSecure Code Warrior Learning Platformagainst: Veracode Security Labsno first choiceagainst: G2 Community Mode / free picked labs, GitHub Copilot, OWASP Juice Shop, OWASP SKF, Pluralsight
Three alternatives
SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
SANS Developer Security Training, SecureFlagTwo alternatives
SecureFlag, Security JourneyGrok 4.20Secure Code Warrior Learning PlatformCheckmarx CodebashingChangedagainst: SANS Developer Security TrainingSecure Code Warrior Learning PlatformSecureFlagagainst: Black Duck, Checkmarx Codebashing, KnowBe4, SafeStack Academy, Secure Code Warrior Learning Platform, Security JourneySecurity Journeyagainst: Secure Code Warrior Learning Platform, Security Journey, Snyk Learn, Veracode Security Labs
Four alternatives
CMD+CTRL Training, SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
Practical DevSecOps, SecureFlagFour alternatives
SafeStack Academy, SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
PortSwigger Academy, Snyk LearnThree alternatives
AppSecEngineer, Avatao, SecureFlagMistral SmallCMD+CTRL TrainingSANS Developer Security Training, SecureFlagChangedSecure Code Warrior Learning Platformagainst: SANS Developer Security TrainingSecureFlag, Security Journeyno first choiceagainst: Secure Code Warrior Learning Platform
Two alternatives
Secure Code Warrior Learning Platform, Security JourneyOne alternative
CodebashingFour alternatives
CMD+CTRL Training, SafeStack Academy, Security Journey, Veracode Security LabsOne alternative
SafeStack AcademyDeepSeek V4 FlashSecure Code Warrior Learning PlatformSecure Code Warrior Learning PlatformHeldSecure Code Warrior Learning Platform, SecureFlagSecure Code Warrior Learning Platformno first choiceagainst: Codebashing, Coursera for Business, KnowBe4, Pluralsight Security Paths, SANS Security Awareness, Secure Code Warrior Learning Platform, Security Journey, Udemy
Three alternatives
SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
SecureFlag, Security JourneyThree alternatives
Codebashing, Security Journey, Veracode Security LabsTwo alternatives
SecureFlag, Security JourneyLlama 4 MaverickVeracode Security Labsno first choiceChangedno first choiceno first choiceno first choicenothing named
Three alternatives
CMD+CTRL Training, Secure Code Warrior Learning Platform, WizerQwen 3.7 FlashSecurity JourneySecure Code Warrior Learning PlatformChangedagainst: SANS TechnologySecure Code Warrior Learning PlatformSecure Code Warrior Learning Platformno first choiceagainst: Secure Code Warrior Learning Platform, Security Journey
Three alternatives
Kontra + Courses, SecureStack, Veracode Security LabsTwo alternatives
Pluralsight "Secure Ready", SecureFlagTwo alternatives
Hack The Box Academy, SANS Technology InstituteTwo alternatives
DevRevOps, SANS Developer Security TrainingKimi K2SecureFlagSecurity JourneyChangedSecure Code Warrior Learning Platformagainst: HackerRank for WorkSecureFlagagainst: Secure Code Warrior Learning Platformno first choiceagainst: Secure Code Warrior Learning Platform, Security Journey
Two alternatives
Secure Code Warrior Learning Platform, Security JourneyThree alternatives
Secure Code Warrior Learning Platform, SecureFlag, Snyk LearnFive alternatives
Checkmarx Codebashing, Immersive Labs, SecureFlag, Security Journey, Veracode Security LabsTwo alternatives
Security Compass, Veracode Security LabsGLM 4.7 FlashXSecurity JourneySecureFlagChangedSecurity Journeyagainst: Hacksplaining for TeamsSecureFlagno first choiceagainst: Arctic Wolf, RansomLeak, Secure Code Warrior Learning Platform, Veracode Security Labs
Five alternatives
Checkmarx Codebashing, SafeStack Academy, Secure Code Warrior Learning Platform, SecureCodingHub, SecureFlagThree alternatives
CMD+CTRL Training, SANS Security Awareness, Security JourneyThree alternatives
AppSecEngineer, Secure Code Warrior Learning Platform, SecureFlagOne alternative
Secure Code Warrior Learning PlatformMiniMax M2.5SecureFlag, Security JourneyAnagram SecurityChangedSecure Code Warrior Learning Platform, SecureFlag, Security JourneySoftware Securedagainst: Secure Code Warrior Learning Platform, SecureFlagno first choicenothing named
Two alternatives
Codebashing, Secure Code Warrior Learning PlatformTwo alternatives
Kontra, SecureFlagOne alternative
Herd SecurityGPT-6 LunaSecure Code Warrior Learning PlatformSecure Code Warrior Learning PlatformHeldagainst: Snyk LearnSecure Code Warrior Learning Platform, SecureFlagSecurity Journeyno first choiceagainst: OWASP Secure Coding Dojo
Two alternatives
SecureFlag, Security JourneyOne alternative
SecureFlagThree alternatives
AppSecEngineer, Kontra, Security JourneyMuse Glimmer 30BSecure Code Warrior Learning PlatformSecure Code Warrior Learning PlatformHeldSecure Code Warrior Learning Platform, SecureFlagSafeStack Academy, SecureFlagagainst: SANS Developer Security Training, Secure Code Warrior Learning Platformno first choiceagainst: Veracode Security Labs
Three alternatives
Checkmarx Codebashing, SecureFlag, Veracode Security LabsOne alternative
SANS Developer Security TrainingFive alternatives
Kontra + Courses, Security Innovation, Security Journey, Snyk Learn, Veracode Security LabsOne alternative
Security JourneyBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:25 | yes | 9 | 8 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:33 | yes | 3 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:03 | yes | 8 | 24 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-04 23:07 | yes | 17 | 2 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:31 | yes | 18 | 10 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:17 | yes | 5 | 3 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:53 | yes | 20 | 49 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:48 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:26 | yes | 16 | 40 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:06 | yes | 14 | 22 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:17 | yes | 21 | 32 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:31 | yes | 5 | 13 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-10-04 23:23 | yes | 3 | 13 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 23:53 | yes | 13 | 20 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:54 | yes | 18 | 10 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:31 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 23:29 | yes | 10 | 19 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 01:40 | yes | 18 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:04 | yes | 20 | 9 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:21 | yes | 5 | 5 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:43 | yes | 23 | 31 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:26 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:55 | yes | 9 | 35 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 22:25 | yes | 23 | 47 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:50 | yes | 13 | 34 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:27 | yes | 5 | 18 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:43 | yes | 3 | 15 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:29 | yes | 13 | 13 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:18 | yes | 13 | 10 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:28 | yes | 7 | 10 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:43 | yes | 22 | 35 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-05 01:05 | yes | 16 | 4 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:35 | yes | 17 | 13 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:00 | yes | 9 | 10 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:55 | yes | 22 | 81 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 22:53 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:39 | no | 0 | 35 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:20 | yes | 23 | 30 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:31 | yes | 15 | 191 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 23:29 | yes | 23 | 35 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:55 | yes | 6 | 22 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:54 | yes | 14 | 25 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:27 | yes | 15 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:29 | yes | 3 | 8 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:28 | yes | 17 | 29 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-05 00:16 | yes | 15 | 5 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 22:46 | yes | 18 | 11 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:37 | yes | 9 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:40 | yes | 23 | 25 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:54 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:17 | no | 0 | 28 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:43 | yes | 19 | 31 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:25 | yes | 20 | 51 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:29 | yes | 16 | 43 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:52 | yes | 2 | 22 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:00 | yes | 21 | 34 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:28 | yes | 23 | 14 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:21 | yes | 3 | 11 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:04 | yes | 6 | 25 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-04 23:28 | yes | 17 | 6 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-04 23:47 | yes | 19 | 10 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:06 | no | 0 | 8 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:01 | yes | 21 | 53 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:16 | yes | 5 | 4 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:54 | yes | 10 | 35 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:30 | yes | 23 | 28 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:34 | yes | 12 | 35 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:49 | yes | 9 | 53 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-10-04 23:28 | yes | 4 | 23 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-04 23:36 | yes | 13 | 22 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:50 | yes | 16 | 10 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 23:58 | yes | 4 | 8 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:09 | yes | 10 | 33 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-05 00:19 | yes | 19 | 6 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-10-05 00:13 | yes | 20 | 13 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 00:22 | yes | 12 | 6 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:54 | yes | 16 | 60 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:10 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:13 | yes | 9 | 30 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:32 | yes | 24 | 34 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:14 | yes | 23 | 56 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:25 | yes | 6 | 28 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-10-04 23:11 | yes | 2 | 20 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:59 | yes | 24 | 26 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Checkmarx read as Checkmarx Codebashing
SANS read as SANS Developer Security Training
SANS (including SANS Cyber Ranges) read as SANS Developer Security Training
SafeStack read as SafeStack Academy
Secure Code Warrior read as Secure Code Warrior Learning Platform
Secure Code Warrior (SCW) read as Secure Code Warrior Learning Platform
Veracode Secure Code Training read as Veracode Security Labs
Unresolved, counted raw
Anagram
Aspen: Adapt
Codebash
Coursera for Business
DevRevOps
G2 Community Mode / free picked labs
HackerRank for Work
Herd Security
OWASP SKF
OWASP VulnCodeLab
OWASP's Application Security Curriculum and Developer Guide
Pluralsight "Secure Ready"
Pluralsight Security Paths
SANS Technology
SANS Technology Institute
Secure Code Training Software
SecureStack
Discontinued, still offered
No shut-down product was recommended here.