Standards and references:
OWASP, SEI CERT, CWE and Fortify Taxonomy.
A one-day capture-the-flag security competition
Code CTF is a one-day corporate competition event specifically designed for corporate engineering teams - architects, developers, testers and DevOps. It combines realistic attack scenarios with secure coding exercises, helping developers understand not just how to attack web applications, but more importantly, how to protect against these attacks effectively.
Like traditional CTFs, this event keeps the core attacker mindset and brings hands-on challenges and gamified challenge-based learning. What differentiates it is the strong defensive focus in the application development arena rather than just the infrastructure, with an IDE-embedded plugin that brings both exploitation and remediation directly into the developer workflow.
Security is a team sport. So, participants work in small groups to exploit and fix vulnerabilities in a real-world web application, having fun and competing on a live leaderboard. The result is a highly engaging learning experience with immediate, practical outcomes for your organization.
In Code CTF everything maps directly to development work: multiple vulnerability classes are included aligned to the actual trends in security today, such as authentication, authorization, injection, logic flaws, etc. Challenges are tailored to the specific technology stack and tools used by the participants, for instance Python, C# / .NET, Java, C/C++ or JS/TS/Node - whatever fits your technology stack.
Experiment!
Compete!
Have fun!
Note: The Code CTF usually comes after a secure coding training, but it can also be organized as a stand-alone event. Therefore, the challenges are designed for mixed-skill groups and security expertise is not required upfront.
Target Audience
All developers, architects and testers.
Preparedness:
General development.
Methods
Certification
After attending this training, participants will receive a High Tech Institute certificate. In addition, this training is part of the Professional Education program of the Dutch Society for Precision Engineering (DSPE), which issues microcredentials for it.
