We performed a comparison between Codebashing and Veracode Security Labs based on real PeerSpot user reviews.
Find out in this report how the two Application Security Training solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is that you get the security from the design of the training. It ensures our developers write code securely and effectively. They will not write code that is vulnerable to hackers."
"There are lots of great plugins available."
"The installation phase of the tool is simple."
"From an academic point of view, Codebashing is a very good product because it is based on gamification. This is especially true if you don't have any idea about secure code training. It is one of the best tools in the world to learn secure coding. The product explains very well how vulnerabilities can be found and how programmers can develop securely."
"This solution has an interactive approach that allows you to quickly receive basic knowledge about vulnerabilities and how they should be fixed."
"The platform is simple, easy to use, and easy to learn."
"According to the feedback, it's an easy-to-use application tool."
"The most valuable feature is the integration with WhiteSource, which allows for open-source scanning."
"The deployment didn't take that long."
"The coding challenges were well put together and I was happy to see some of the challenges even had a built-in web browser."
"The best part is that this is all within the web browser, so the developer doesn't have to install any development environments or download anything to work through the training."
"I like the end-to-end learning experience. That also includes SAST. It has a low false positive rate."
"The features are so extensive, which is why they are ahead of the game, and the reason I continue to use this solution."
"The installation is straightforward."
"Our developers are more security-aware and are writing better code. The e-learning option allows our developers to dig deeper into the security issues. Topics such as sanitizing input, carefully configured logging output, and other typical sources of vulnerabilities."
"The hands-on training has helped us to tackle modern threats by coding with vulnerabilities in mind from the beginning of a project. It has improved our process overall, and the number of vulnerabilities has been reduced."
"It would be helpful if the solution included tests or exams that would allow you to study, for example, all Java vulnerabilities, and then afterward test your knowledge."
"The user interface could be updated and refreshed. It has the appearance of being very basic."
"If customers would be able to define their own quizzes or exams, it would be very good. That is the only missing part that I see - customer based scenarios, examinations and quizzes."
"It isn't a very friendly tool for beginners. In our company, we have to take training courses to learn how to use the platform."
"The solution should make the configuration more simple. Sometimes the configuration is complex."
"I believe that certificates should be issued to users so that they can be used as proof of having completed that training. The certificate is currently not being used for any competence validation outside of the chance environment."
"This solution is available for Windows only and does not have a Linux distribution."
"This solution could be improved by offering an increased number of quizzes after each module. The GUI for this solution could also be updated to be more modern."
"I would have liked to see a bit better auto-completion in the IDE, and there was a typo in one of the questions where the code you were supposed to copy was missing a pair of parentheses."
"I would like the team to make users like me aware of the new features sooner, so we can get the most from this product. Otherwise, there is no disadvantage."
"Developers frequently complain to me about the user interface and the difficulty in navigating the web site."
"There could be better integration between the API and the pipeline systems."
"Its ability to handle more types of files and making it work better with databasing and other API could be improved."
"There are two parts that I think should be improved. Both the web page and the report have the same issue. Both are sometimes messy and very difficult to find information. You need to know where to look and especially where to find information. It can be a bit confusing in both the report and the web page. Quite often, I keep learning new things because some of the information is quite hidden. You need to click this link, then click here, and go here. Then, "Wow," you get so much information that you didn't know existed. Information is a bit hidden and there should be an easier way to access it after a scan is generated."
"It would be good if there were more assignment problems in the inventory, as well as more randomness in the coding examples."
"The only area of this solution that needs improvement is the pricing for startups."
Codebashing is ranked 1st in Application Security Training with 10 reviews while Veracode Security Labs is ranked 2nd in Application Security Training with 10 reviews. Codebashing is rated 8.4, while Veracode Security Labs is rated 8.6. The top reviewer of Codebashing writes "An easy-to-use tool to identify false positives or flag any medium to high-risk outcomes". On the other hand, the top reviewer of Veracode Security Labs writes "We are more productive because we work smarter and optimize the reporting pathway". Codebashing is most compared with Secure Code Warrior Learning Platform, whereas Veracode Security Labs is most compared with Secure Code Warrior Learning Platform. See our Codebashing vs. Veracode Security Labs report.
See our list of best Application Security Training vendors.
We monitor all Application Security Training reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.