Resources
Secure Code Game
Learn to code securely while having fun through our popular open source in-editor experience. Get started in under 2 minutes, playing right from your browser!
PLAY
Players 10k+
Starred 2.3k
Fork 270
Secure your business by empowering your developers
"The game was key in achieving our vision to empower developers by making them autonomous and as resourceful as our security team to be a force multiplier for the wider business. Our engineers had fun! That wasn't another boring training. We noticed an increased sense of ownership among developers and willingness to learn directly from our security engineers."
Bruno A., CISO
"I learned to spot vulnerabilities, where and how they occur, and to correct them effectively before pushing them out to the world. I would absolutely recommend this training to anyone, not only in cyber security but software development too."
Rajeev Mandalam, Application Security at Boeing
"It didn’t focus on a particular programming language and the emphasis is on the code concepts. I also liked how easy it was to navigate between challenges. What I learned is a great skillset to add to my professional journey."
Reshmi Mehta, Security Analyst at Alcon
Played and loved by 10,000+ developers
"It made me realize how much of a gap there is in identifying even the most basic flaws. It made me more cautious."
Sanyam Mehta, Back-end Developer
"Pretty fun way to learn! I would definitely recommend it as it helped me to be more aware of the vulnerabilities out there."
Tyler Anton, Computer Science Student
Teaching the next generation of software developers
"Students immediately got a chance to practice concepts and learn by doing. This is a more efficient way to share knowledge compared to the classic passive delivery."
Ervin Varga, Associate Professor at the Faculty of Technical Sciences, University of Novi Sad
"Looking at the code provided at each game level, it's some of the code that I could have written before. This training helped me realize I'm still lacking some of the ability to identify vulnerabilities."
Xinshuo Lei, Information Management Student
Get started in under 2 min, in 2 steps
1
Clone our template repository
2
Open it on Codespaces
Contribute new game levels!
"Contributing to the Secure Code Game means having an impact on the wider security world. I added challenges to the second season inspired by real-life scenarios, to help others learn!"
Deniz Onur Duzgun, Security Specialist
Frequently Asked Questions (FAQ)
Can I use it internally in my company or as part of a hackathon?
Yes, you can use the Secure Code Game in your organization or as part of developer events.
How long does it take to complete it?
Each challenge takes approximately 15-30 minutes depending on your experience level. Each season is made of 5-6 challenges.
Is it free? Do you offer anything else for free?
Yes, the Secure Code Game is open source, and completely free. You can find our other free resources at https://securitylab.github.com/resources.
Do I need to install something?
No installation required! The game runs directly in your browser using GitHub Codespaces.
Can I contribute new game levels?
Yes, contributions are welcome! You can submit new challenge ideas through GitHub.
Blogs, Videos and Conference Talks
We just launched season three of the GitHub Secure Code Game, and this time we’re putting you face to face with the security risks introduced by artificial intelligence. Get ready to learn by doing and have fun doing it! First, you’ll step into the shoes of an adversary crafting malicious prompts.
The Secure Code Game is an in-repo learning experience where players fix intentionally vulnerable code, so developers can build a secure coding mindset while having fun! Since then, more than 3,500 developers have played in enterprise, open source, and education communities.
Writing secure code is as much of an art as writing functional code, and it is the only way to write quality code. Learn how our Secure Code Game can provide you with hands-on training to spot and fix security issues in your code so that you can build a secure code mindset.