CMD+CTRL Training
CMD+CTRL Training is a leading provider of software security training, offering an industry-leading learning platform designed to help organizations create secure software. Their comprehensive training solutions include over 350 courses and labs covering more than 60 languages and frameworks, structured into progressive learning journeys with certifications. The platform features ultra-realistic, gamified, hands-on training environments that present real-world scenarios, provide real-time feedback, and engage participants through competitive challenges. Detailed insights are offered through customizable skills assessments, robust reporting, and benchmarking tools. CMD+CTRL Training caters to all roles across the software development lifecycle—builders, operators, and defenders, aiming to elevate software security postures. With over 20 years of expertise in industry best practices, the company emphasizes exceptional customer service and support.
Learn more
Security Journey
Our platform takes a unique level approach, transitioning learners from security basics to language-specific knowledge to the experiential learning required to become security champions. With lessons offered in multiple formats, including text, video, and hands-on sandbox environments, there is a modality that resonates with every learning style. Organizations with teams of security champions develop a security-first mindset that allows them to deliver safer, more secure applications. Security Journey offers robust application security education tools to help developers and the entire SDLC team recognize and understand vulnerabilities and threats and proactively mitigate these risks. The knowledge learners acquire in our programs goes beyond helping learners code more securely, it turns everyone in the SDLC into security champions. Our flexible platform makes it quick and easy to achieve short-term compliance goals, and target current problems.
Learn more
SecureCodingHub
SecureCodingHub is an interactive secure coding training platform for AppSec teams and engineering organizations. It offers Code Review Challenges — a two-phase find-and-fix flow across 185+ vulnerability types — and Guided Attack Scenarios with 67 step-by-step walkthroughs simulating full attack chains. Challenges are written in production-realistic code across 15 languages and frameworks including JavaScript, TypeScript, Python, Java, C#, Go, React, Vue, Angular, Swift, and Kotlin. Coverage spans OWASP Web, API, Mobile, and Client-Side Top 10. Compliance evidence builds automatically, mapped to PCI DSS 4.0.1, ISO 27001:2022, and EU CRA. Enterprise features include SAML 2.0/OIDC SSO, SCIM 2.0, SCORM 1.2/2004 LMS integration, multi-tenant hierarchy, assignment workflows, and an immutable audit log for QSA, SOC 2, and ISO audits.
Learn more
Kontra
Kontra + Courses helps organizations build application security skills across development teams through a combination of 50+ video courses and 300+ hands-on vulnerability labs. Developers learn to identify, exploit, and remediate real vulnerabilities across 25+ technology stacks using practical code examples in their actual frameworks. Each Kontra lab walks through a real-world vulnerability scenario—like the 2021 Log4Shell exploit—then guides users through hands-on remediation with stack-specific code. This practical approach leads to 3x higher completion rates than traditional security training and helps AppSec teams scale secure coding practices without pulling developers out of their workflow. Most labs take under 10 minutes to complete. The platform is SCORM-compliant and integrates with existing LMS systems or can be delivered via hosted environment. Role-based curriculum aligns with NIST, ISO 27001, and PCI-DSS, and supports ISC2 co-branded certification.
Learn more