Zero of fourteen models named OWASP Secure Coding Dojo first on the direct prompt; zero named Veracode Security Labs. OWASP Secure Coding Dojo was named by nine of the fourteen models and Veracode Security Labs by twelve and OWASP Secure Coding Dojo carries 14 labels and Veracode Security Labs 23, so the shares are not directly comparable.
Named in one category this edition.
Named in one category this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the secure code training page.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.20 | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Four of five in this category shown.
“often recommended as supplements for practical labs but aren't full commercial platforms” Grok 4.20 · comparative prompt · soft negative
“Zero budget, hands-on: OWASP Secure Coding Dojo + Secure Code Game. Both are free to self-host and run internally” Muse Glimmer 30B · budget prompt · first choice
“If you need a zero-cost, self-hosted option and can spare staff time to run it, OWASP's Secure Coding Dojo is free software” GPT-6 Luna · budget prompt · alternative
“For a low-cost start, combine the OWASP Secure Coding Dojo with PortSwigger's free interactive Web Security Academy” GPT-6 Luna · paraphrase prompt · alternative
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of eight in this category shown.
“Paid enterprise platforms like Secure Code Warrior, Veracode Security Labs, or Immersive Labs are highly rated for depth and integration but often start at thousands of dollars annually” Grok 4.20 · budget prompt · soft negative
“Veracode Security Labs, Synopsys, and Checkmarx Codebashing, which are considered to be high-cost and high-friction” Llama 4 Maverick · negative prompt · soft negative
“they can feel more bolted-on than dedicated platforms like SCW, and pricing may be higher for mid-market” Grok 4.20 · direct prompt · soft negative
“SANS and Veracode are both excellent choices” Mistral Small · paraphrase prompt · first choice
“Best For: Teams already standardized on Veracode scanning who want training that aligns with their existing tooling.” GLM 4.7 FlashX · comparative prompt · alternative
“Best for: Existing Veracode customers wanting training that complements their scanning and remediation workflows.” DeepSeek V4 Flash · comparative prompt · alternative
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.