Secure code training for small business buyers
Asked as “secure code training platform”, and as “developer security training”, on behalf of a small B2B company. 57 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
25%
Contested · Secure Code Warrior Learning Platform 16%
25SecureFlag16Secure Code Warrior Learning Platform12Snyk Learn47others
25% of first choices, contested.
Since October 2026▼−1Since October 2026: 26% → 25%, −1 point. Inside the 11-point floor: within noise.SecureFlag held the lead, −1 point on 26%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
SecureFlag25%Contested▼−1Since October 2026: 26% → 25%, −1 point. Inside the 11-point floor: within noise.This pageMid-market
Secure Code Warrior Learning Platform38%Contested↗new leaderNew leader since October 2026: Secure Code Warrior Learning Platform (38%) replaces SecureFlag (26% then, 12% now), 26 points clear, past the 11-point floor.Standing →EnterpriseSecure Code Warrior Learning Platform62%Clear leader▲+25Since October 2026: 37% → 62%, +25 points. Past the 11-point floor: movement.Standing →
SecureFlag25%Contested▼−1Since October 2026: 26% → 25%, −1 point. Inside the 11-point floor: within noise.This pageMid-marketSecure Code Warrior Learning Platform38%Contested↗new leaderNew leader since October 2026: Secure Code Warrior Learning Platform (38%) replaces SecureFlag (26% then, 12% now), 26 points clear, past the 11-point floor.Standing →EnterpriseSecure Code Warrior Learning Platform62%Clear leader▲+25Since October 2026: 37% → 62%, +25 points. Past the 11-point floor: movement.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01SecureFlag25%7%41accepted challenger▼−1Since October 2026: 26% → 25%, −1 point. Inside the 11-point floor: within noise.26% → 25%
SecureFlag25%7%41accepted challenger▼−1Since October 2026: 26% → 25%, −1 point. Inside the 11-point floor: within noise.26% → 25%02Secure Code Warrior Learning Platform16%38%58criticized challenger▲+12Since October 2026: 4% → 16%, +12 points. Past the 11-point floor: movement.4% → 16%
Secure Code Warrior Learning Platform16%38%58criticized challenger▲+12Since October 2026: 4% → 16%, +12 points. Past the 11-point floor: movement.4% → 16%03
Snyk Learn12%0%37accepted challenger▼−3Since October 2026: 15% → 12%, −3 points. Inside the 11-point floor: within noise.15% → 12%
Snyk Learn12%0%37accepted challenger▼−3Since October 2026: 15% → 12%, −3 points. Inside the 11-point floor: within noise.15% → 12%04
SafeStack Academy7%0%21accepted challenger▼−6Since October 2026: 13% → 7%, −6 points. Inside the 11-point floor: within noise.13% → 7%
SafeStack Academy7%0%21accepted challenger▼−6Since October 2026: 13% → 7%, −6 points. Inside the 11-point floor: within noise.13% → 7%05
Security Journey5%23%26accepted challenger▼−4Since October 2026: 9% → 5%, −4 points. Inside the 11-point floor: within noise.9% → 5%
Security Journey5%23%26accepted challenger▼−4Since October 2026: 9% → 5%, −4 points. Inside the 11-point floor: within noise.9% → 5%06
PortSwigger Web Security Academy4%0%10accepted challenger▲+2Since October 2026: 2% → 4%, +2 points. Inside the 11-point floor: within noise.2% → 4%
PortSwigger Web Security Academy4%0%10accepted challenger▲+2Since October 2026: 2% → 4%, +2 points. Inside the 11-point floor: within noise.2% → 4%07
AppSecEngineer2%9%11accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
AppSecEngineer2%9%11accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%Show the four products at 0%, ordered by negative rate
11
KnowBe40%45%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
KnowBe40%45%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%10
Immersive Labs0%36%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Immersive Labs0%36%11criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%09
Veracode Security Labs0%13%15accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Veracode Security Labs0%13%15accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%08Avatao0%5%22accepted challenger▼−9Since October 2026: 9% → 0%, −9 points. Inside the 11-point floor: within noise.9% → 0%
The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Secure Code Warrior Learning Platform vs SecureFlagSecure Code Warrior Learning Platform vs Snyk LearnSecure Code Warrior Learning Platform vs SafeStack Academy
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All twenty-eight head-to-head pages: the top eight products, each against each
Secure Code Warrior Learning Platform vs Security JourneySecure Code Warrior Learning Platform vs AppSecEngineerSecure Code Warrior Learning Platform vs OWASP Secure Coding DojoSecure Code Warrior Learning Platform vs Veracode Security LabsSecureFlag vs Snyk LearnSecureFlag vs SafeStack AcademySecureFlag vs Security JourneySecureFlag vs AppSecEngineerSecureFlag vs OWASP Secure Coding DojoSecureFlag vs Veracode Security LabsSnyk Learn vs SafeStack AcademySnyk Learn vs Security JourneySnyk Learn vs AppSecEngineerSnyk Learn vs OWASP Secure Coding DojoSnyk Learn vs Veracode Security LabsSafeStack Academy vs Security JourneySafeStack Academy vs AppSecEngineerSafeStack Academy vs OWASP Secure Coding DojoSafeStack Academy vs Veracode Security LabsSecurity Journey vs AppSecEngineerSecurity Journey vs OWASP Secure Coding DojoSecurity Journey vs Veracode Security LabsAppSecEngineer vs OWASP Secure Coding DojoAppSecEngineer vs Veracode Security LabsOWASP Secure Coding Dojo vs Veracode Security Labs
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01020304050607A08
091011Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative40%
Key
01SecureFlag25%
SecureFlag25%02Secure Code Warrior Learning Platform16%
Secure Code Warrior Learning Platform16%03Snyk Learn12%
Snyk Learn12%04SafeStack Academy7%
SafeStack Academy7%05Security Journey5%
Security Journey5%06PortSwigger Web Security Academy4%
PortSwigger Web Security Academy4%07AppSecEngineer2%
AppSecEngineer2%08Avatao0%
09Veracode Security Labs0%
Veracode Security Labs0%10Immersive Labs0%
Immersive Labs0%11KnowBe40%
KnowBe40%What they warned about
Two of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, Kimi K2, GLM 4.7 FlashX, MiniMax M2.5 and GPT-6 Luna changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Secure Code Warrior Learning Platform38%
22 of 58 labels negative · 10 of 14 models · 8 hard negative
“Avoid Cybrary (billing risk + shallow content), INE (poor reviews + enterprise focus), and Secure Code Warrior if you have fewer than ~50 developers.” DeepSeek V4 Flash, negative prompt
Security Journey23%
6 of 26 labels negative · 6 of 14 models
“some reviews note a buggy UI that disrupts learning, incomplete coverage... might feel basic or incomplete for specialized small dev shops” Grok 4.20, negative prompt
SANS Developer Security Training67%
6 of 9 labels negative · 5 of 14 models · 2 hard negative
“What I'd Avoid for Your Situation: ... SANS — Excellent training, but enterprise-level pricing” DeepSeek V4 Flash, paraphrase prompt
Checkmarx Codebashing56%
5 of 9 labels negative · 5 of 14 models · 1 hard negative
“Enterprise-priced; generally out of budget for very small teams.” DeepSeek V4 Flash, budget prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
70 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 760 links across 128 sites, every framing counted. Ranked by the number of answers carrying the site or page. 93 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
vendor site · G241 answers · 65 citations · 13 models
33 answers · 45 citations · 10 models
vendor site · SourceForge32 answers · 46 citations · 10 models
publisher (Gane)31 answers · 33 citations · 10 models
29 answers · 35 citations · 10 models
vendor site · RansomLeak26 answers · 27 citations · 11 models
vendor site · Secure Code Warrior22 answers · 27 citations · 7 models
vendor site · Security Journey21 answers · 33 citations · 8 models
vendor site · GitHub17 answers · 22 citations · 8 models
vendor site · SecureFlag17 answers · 18 citations · 8 models
vendor site · Veracode16 answers · 18 citations · 9 models
15 answers · 15 citations · 7 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
31 answers · 12 models
30 answers · 10 models
28 answers · 10 models
27 answers · 10 models
26 answers · 11 models
16 answers · 8 models
16 answers · 8 models
16 answers · 9 models
15 answers · 7 models
14 answers · 5 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best secure code training platform”, “secure code training platform”, “secure code training platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| SecureFlag secureflag.com | 25% | 135 | 480 | 0 | 935 | $94 | 8 | 8 |
| Secure Code Warrior Learning Platform securecodewarrior.com | 16% | 179 | 2,802 | 7 | 2 | |||
| Snyk snyk.io Snyk Learn 12%, Snyk 2% | 14% | 150 | 12,100 | 581 | 61,651 company | 60 | ||
| OWASP resources owasp.org OWASP resources 5%, OWASP Juice Shop 2%, OWASP Secure Software Fundamentals 2%, OWASP SecureFlag 2% | 11% | 7 | 365,222 | 8 | ||||
| SafeStack Academy safestack.io | 7% | 41 | 10 | 0 | 92 | 1 | ||
| Security Journey securityjourney.com | 5% | 103 | 390 | 8 | 1,490 | 10 | 5 | |
| PortSwigger Web Security Academy portswigger.net | 4% | 13 | 1,000 | 4 | 89,623 | |||
| OpenSSF "Developing Secure Software" openssf.org OpenSSF "Developing Secure Software" 2%, OpenSSF Secure Software Fundamentals Course 2% | 4% | 3 | 4 | |||||
| AppSecEngineer appsecengineer.com | 2% | 53 | 50 | 0 | 1,849 | 0 | ||
| Code Review Lab | 2% |
Google's top ten for the three searches hold 21 sites; 6 of them are among the sites the models cited here (blog.secureflag.com, github.com, reddit.com, securecodewarrior.com, securityjourney.com, veracode.com). The first result for “best secure code training platform” is safestack.io.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best secure code training platform for a small B2B company?”Paraphrase“Which developer security training would you recommend to a small business that sells to other businesses?”Comparative“What are the top secure code training platforms for a small team and how do they differ?”Budget-constrained“What is the best secure code training platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a secure code training platform. What should we look at?”Negative“Which secure code training platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5SafeStack AcademySecure Code Warrior Learning PlatformChangedSecure Code Warrior Learning PlatformCode Review Lab, SafeStack Academyno first choicenothing named
Three alternatives
Avatao, Code Review Lab, Secure Code Warrior Learning PlatformFour alternatives
Avatao, CMD+CTRL Training, HackEDU, SafeStack AcademyFour alternatives
Avatao, Code Review Lab, Codebashing, SecureFlagOne alternative
Snyk LearnGPT-5.4 miniSecureFlagagainst: Secure Code Warrior Learning Platform, Secure Coding DojoSecureFlagHeldSecure Code Warrior Learning Platform, SecureFlagOWASP SecureFlagagainst: Secure Code Warrior Learning Platformno first choiceagainst: Avatao, Black Duck Polaris Platform, Checkmarx Codebashing, Immersive Labs
One alternative
Immersive One / Immersive LabsTwo alternatives
OWASP Secure Coding Dojo, SANS Developer Security TrainingThree alternatives
Checkmarx Codebashing, OWASP Secure Coding Dojo, Veracode Security LabsTwo alternatives
OWASP CTF-in-a-Box, OWASP Security ShepherdGemini 3.5 FlashSecure Code Warrior Learning PlatformSafeStack AcademyChangedSecure Code Warrior Learning PlatformKontra Application Security, PortSwigger Web Security Academyagainst: Secure Code Warrior Learning Platform, VeracodeSecure Code Warrior Learning Platformagainst: Checkmarx Codebashing, Hack The Box, Secure Code Warrior Learning Platform, TryHackMe, Veracode Security Labs
Four alternatives
AppSecEngineer, Kontra Application Security, SecureFlag, Snyk LearnFive alternatives
Hack The Box (HTB) for Business, PortSwigger Web Security Academy, Secure Code Warrior Learning Platform, Semgrep, SnykFive alternatives
AppSecEngineer, Hack The Box Academy, PortSwigger Web Security Academy, Snyk Learn, TryHackMeSix alternatives
Code Review Lab, Hack The Box Academy, OWASP Open Source Vulnerable Apps, SafeStack Academy, SecureCodingHub, TryHackMeFour alternatives
Codebashing, Hack The Box (HTB) for Business, Snyk Learn, Veracode Security LabsPerplexity SonarSecurity Journeyagainst: Secure Code Warrior Learning PlatformSecure Code Warrior Learning PlatformChangedSecure Code Warrior Learning PlatformCourserano first choiceagainst: AppSecEngineer, Checkmarx Codebashing, SANS Developer Security Training, Secure Code Warrior Learning Platform, SecureFlag, Security Journey
Three alternatives
Avatao, SecureFlag, Snyk LearnTwo alternatives
SANS Developer Security Training, Veracode Security LabsSeven alternatives
AppSecEngineer, Checkmarx Codebashing, Kontra, SecureFlag, Security Journey, Snyk Learn, Veracode Security LabsThree alternatives
AppSecEngineer, Code Review Lab, Snyk LearnGrok 4.20Secure Code Warrior Learning Platformagainst: Checkmarx Codebashing, SANS Security AwarenessOpenSSF Secure Software Fundamentals CourseChangedagainst: IBM's Coursera course, SANS Developer Security Training, Synk LearnAvatao, Secure Code Warrior Learning Platformagainst: KnowBe4, Security CompassSnyk LearnSecure Code Warrior Learning Platformagainst: Black Duck, Secure Code Warrior Learning Platform, Security Journey
Three alternatives
SafeStack Academy, SecureFlag, Snyk LearnFive alternatives
CMU's Secure Coding in C/C++, RansomLeak, Secure Code Warrior Learning Platform, Security Journey's OWASP Path, Veracode Security LabsFour alternatives
AppSecEngineer, Immersive Labs, Kontra, SecureFlagThree alternatives
OWASP Juice Shop, Secure Code Warrior Learning Platform, WebGoatThree alternatives
Immersive Labs, Snyk Learn, Veracode Security LabsMistral SmallSecureFlagno first choiceChangedSecureFlag, Snyk Learnagainst: Secure Code Warrior Learning PlatformSecureFlag, Snyk Learnno first choiceagainst: Secure Code Warrior Learning Platform, Veracode Security Labs
Four alternatives
Avatao, SafeStack Academy, Security Journey, Snyk LearnFour alternatives
Avatao, Kontra, SafeStack Academy, Security JourneyTwo alternatives
Avatao, SafeStack AcademyDeepSeek V4 FlashSecureFlagagainst: Secure Code Warrior Learning Platform, Security JourneySecurity JourneyChangedagainst: SANS Developer Security Training, Secure Code Warrior Learning PlatformSecureFlagOWASP resources, PortSwigger Web Security Academy, SecureFlagagainst: Checkmarx Codebashing, Immersive Labs, KnowBe4, SANS Developer Security Training, Secure Code Warrior Learning Platformno first choiceagainst: Cybrary, INE, KnowBe4, Proofpoint, Secure Code Warrior Learning Platform
Two alternatives
SafeStack Academy, Snyk LearnTwo alternatives
Free OpenSSF Course — "Developing Secure Software", SecureFlagThree alternatives
Immersive Labs, Secure Code Warrior Learning Platform, Security JourneyThree alternatives
Cybrary, OWASP Secure Coding Dojo, OWASP WebGoatLlama 4 Mavericksafestack.ioGitHub - Ransomleak Training Application SecurityChangedno first choiceSnyk Learnno first choiceagainst: Secure Code Warrior Learning Platform, Security Journey
Six alternatives
Avatao, Codebashing, Secure Code Warrior Learning Platform, Security Innovation Application Security Training, Security Journey, Veracode Security LabsOne alternative
Developer Security Training: OWASP & Secure Coding | BSGFour alternatives
Avatao, OWASP Secure Coding Dojo, SafeStack Academy, SecureFlagQwen 3.7 FlashSecureFlagSnyk LearnChangedSecureFlag, Snyk LearnSnykagainst: IBM AppScan, VeracodeSecure Code Warrior Learning Platformagainst: TestDomenothing named
Two alternatives
ImmersiveLabs, Secure Code Warrior Learning PlatformTwo alternatives
OpenSSF, SANS Security AwarenessThree alternatives
Avatao, Immersive Labs, Security JourneyThree alternatives
OWASP resources, Pluralsight, PortSwigger Web Security AcademyTwo alternatives
HackerRank / HackerOne, Snyk AcademyKimi K2SecureFlagagainst: Secure Code Warrior Learning PlatformOpenSSF "Developing Secure Software"Changedagainst: SANS Developer Security Training, Secure Code Warrior Learning PlatformRansomLeak, Snyk Learnagainst: Immersive Labs, Secure Code Warrior Learning PlatformSafeStack AcademySecureFlag, Security Journeyagainst: Codebashing, KnowBe4, Proofpoint, Secure Code Warrior Learning Platform
Three alternatives
Avatao, SafeStack Academy, Snyk LearnThree alternatives
Kontra, Security Journey, Snyk LearnTwo alternatives
Hack The Box Academy, Veracode Security LabsThree alternatives
Code Review Lab, GitHub Open-Source Training, SecureFlagTwo alternatives
SafeStack Academy, Snyk LearnGLM 4.7 FlashXSecureFlagOWASP Secure Software Fundamentals, Snyk Learn – “Security for Developers”Changedagainst: SANS Institute – Developer Security Awareness Training, Security Journeyno first choiceOWASP Juice ShopSecure Code Warrior Learning Platformagainst: Code for All, Coding Dojo, SecureFlag
Three alternatives
Avatao, OWASP Secure Coding Dojo, Secure Code Warrior Learning PlatformFour alternatives
GitHub – “training-application-security”, OWASP Application Security Curriculum, OWASP Juice Shop, Secure Code Warrior Learning PlatformThree alternatives
OWASP Training Application, SecureFlag, Security JourneyThree alternatives
AppSecEngineer, SecureFlag, Veracode Security LabsMiniMax M2.5AppSecEngineer, Secure Code Warrior Learning PlatformOWASP resources, Snyk LearnChangedagainst: SANS Developer Security Training, SecureFlagSecurity Journeyagainst: KnowBe4OWASP resources, Snyk Learnno first choicenothing named
Three alternatives
ImmersiveLabs, KnowBe4, Veracode Security LabsTwo alternatives
GitHub - Secure Coding Exercises, Secure Code Warrior Learning PlatformFive alternatives
Checkmarx Codebashing, Immersive Labs, Ransomleak Training Application Security, Secure Code Warrior Learning Platform, Snyk LearnOne alternative
KontraGPT-6 LunaSecureFlagPortSwigger's free, hands-on Web Security AcademyChangedSecureFlagSnyk LearnSecureFlagagainst: OWASP Secure Coding Dojoagainst: Juice Shop, OWASP WebGoat, Secure Code Warrior Learning Platform
Three alternatives
OWASP Secure Coding Dojo, Secure Code Warrior Learning Platform, Snyk LearnOne alternative
SecureFlagFour alternatives
PortSwigger Web Security Academy, Secure Code Warrior Learning Platform, Security Journey, Snyk LearnTwo alternatives
PortSwigger Web Security Academy, SecureFlagThree alternatives
Kontra, Secure Code Warrior Learning Platform, Snyk LearnMuse Glimmer 30BSecureFlagSecureFlagHeldSecureFlagagainst: Immersive Labs, Secure Code Warrior Learning PlatformRansomleak Training Application Securityagainst: Secure Code Warrior Learning Platformno first choiceagainst: Secure Code Warrior Learning Platform, Security Journey
Four alternatives
Avatao, SafeStack Academy, Secure Code Warrior Learning Platform, Snyk LearnTwo alternatives
Secure Code Warrior Learning Platform, Snyk LearnTwo alternatives
PortSwigger Web Security Academy, Snyk LearnThree alternatives
Avatao, Linux Foundation OpenSSF - Developing Secure Software LFD121, PortSwigger Web Security AcademyBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:24 | yes | 10 | 7 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:18 | yes | 3 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:47 | yes | 7 | 19 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 15:38 | yes | 10 | 3 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:01 | yes | 12 | 15 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:11 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:16 | yes | 24 | 39 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:10 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:14 | yes | 5 | 20 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:00 | yes | 8 | 13 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 16:39 | yes | 14 | 51 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:37 | yes | 5 | 18 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:17 | yes | 4 | 11 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:10 | yes | 10 | 21 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:19 | yes | 17 | 9 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:16 | yes | 3 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:11 | no | 0 | 17 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 10:46 | yes | 10 | 3 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:07 | yes | 13 | 10 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:31 | no | 0 | 1 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:06 | yes | 24 | 28 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:22 | yes | 5 | 4 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 08:59 | yes | 5 | 23 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:36 | yes | 20 | 34 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:16 | yes | 12 | 18 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:34 | yes | 5 | 26 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:28 | yes | 3 | 13 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 18:05 | yes | 12 | 16 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:23 | yes | 9 | 8 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 19:26 | yes | 7 | 8 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:36 | no | 0 | 15 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 13:17 | yes | 10 | 5 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:17 | yes | 5 | 14 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 14:10 | yes | 5 | 8 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:28 | yes | 13 | 30 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 14:20 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 08:58 | yes | 5 | 31 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 17:17 | yes | 14 | 69 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 15:50 | yes | 10 | 67 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:02 | yes | 19 | 52 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 13:43 | yes | 7 | 19 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:22 | yes | 22 | 34 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 14:18 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 17:26 | yes | 4 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:24 | yes | 12 | 20 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 08:54 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:52 | yes | 15 | 11 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 12:00 | yes | 5 | 5 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:58 | yes | 23 | 23 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 10:12 | yes | 9 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 18:30 | no | 0 | 26 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 18:12 | yes | 14 | 37 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:49 | yes | 24 | 19 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:29 | no | 0 | 13 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 15:32 | yes | 3 | 14 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 16:25 | yes | 14 | 16 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 17:02 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 10:45 | no | 0 | 6 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:04 | no | 0 | 14 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 15:06 | yes | 10 | 6 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:43 | yes | 10 | 13 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:05 | no | 0 | 6 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 14:19 | no | 0 | 21 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:33 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:30 | no | 0 | 26 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:17 | yes | 18 | 27 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:57 | yes | 15 | 21 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:04 | yes | 10 | 26 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:36 | yes | 4 | 15 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 13:29 | yes | 15 | 19 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:19 | yes | 16 | 8 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 17:19 | yes | 2 | 5 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:41 | no | 0 | 17 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 17:26 | yes | 10 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:55 | yes | 15 | 10 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:59 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 15:45 | yes | 24 | 41 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:58 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:01 | no | 0 | 28 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:50 | yes | 25 | 55 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 18:26 | yes | 25 | 53 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:53 | no | 0 | 12 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:17 | yes | 3 | 17 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:32 | yes | 19 | 29 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Checkmarx read as Checkmarx Codebashing
OWASP read as OWASP resources
SANS read as SANS Developer Security Training
SafeStack read as SafeStack Academy
Secure Code Warrior read as Secure Code Warrior Learning Platform
Secure Code Warrior (SCW) read as Secure Code Warrior Learning Platform
Veracode Secure Code Training read as Veracode Security Labs
Unresolved, counted raw
Amazon Cybersecurity Awareness
AppSec Labs
Ascend Education
CMU's Secure Coding in C/C++
Developer Security Training: OWASP & Secure Coding | BSG
ELC Information Security
Free OpenSSF Course — "Developing Secure Software" (LFD121)
GitHub - Secure Coding Exercises
GitHub Open-Source Training
GitHub – “training-application-security”
HackerRank / HackerOne
IBM's Coursera course
INE (formerly eLearnSecurity)
Immersive One / Immersive Labs
Linux Foundation OpenSSF - Developing Secure Software LFD121
OWASP CTF-in-a-Box
OWASP Open Source Vulnerable Apps (Juice Shop / WebGoat)
OWASP Secure Software Fundamentals (Free Course)
OWASP SecureFlag
OWASP Training Application (GitHub)
PortSwigger's free, hands-on Web Security Academy
SANS Institute – Developer Security Awareness Training
Secure Coding Dojo
SecureCode Warrior
Security Innovation Application Security Training
Security Journey's OWASP Path
Snyk Academy
Snyk Learn – “Security for Developers”
Synk Learn
TestDome
passwork.pro
safestack.io
we45
Discontinued, still offered
No shut-down product was recommended here.