SecureFlag Reviews & Product Details

The hands-on virtual labs are the best part of SecureFlag. Our engineers really enjoyed the practical secure coding exercises in C#, .NET, and C/C++, and they found them engaging, relevant, and straightforward to apply to real projects. Review collected by and hosted on G2.com.

The virtual labs have been very valuable for our teams. We see potential in Threat Canvas as well, and additional capabilities and practical workflows could make it even more useful for day-to-day threat modeling activities. Review collected by and hosted on G2.com.

What I like best about SecureFlag is its hands-on, practical approach to secure coding and application security training. The platform goes beyond theory by providing realistic labs and scenarios that closely mirror real-world vulnerabilities, which makes it highly effective for building developer skills. As an org admin, I also appreciate the ease of managing users, tracking progress, and measuring engagement across teams. The structured learning paths and integration into SDLC workflows make it a valuable tool for driving a strong security culture within the organization. Review collected by and hosted on G2.com.

SecureFlag is strong overall, but there is room for improvement in its off-the-shelf metrics Review collected by and hosted on G2.com.

SecureFlag has been a fantastic addition to our security awareness training at SurePay. Unlike traditional secure SDLC presentations, it offers hands-on, practical training that keeps developers engaged with real-world threats. The interactive approach means our team isn't just sitting through slides — they're actively tackling the latest vulnerabilities in a safe environment. It's a far more effective way to build a security-first culture, and we've seen the results firsthand. UI/UX is also friendly and easy to understand. Also, the support team is always eager to take feedback and continuously improve their product and implement suggestions. Review collected by and hosted on G2.com.

None so far, SecureFlag has played a pivotal role in our pursuit of secure product

development. It has enabled the company to achieve compliance in a fun and engaging way, thereby fostering a strong culture of security within the organization. Review collected by and hosted on G2.com.

The hands-on learning format works really well: the topics are clearly explained and then immediately followed by real coding tasks, which makes the training stick much better than simply ticking a box.

The customer success team was excellent, with proactive outreach and well-organized coding campaigns. Overall, a very professional team. Review collected by and hosted on G2.com.

Some of the threat modeling exercises feel a bit repetitive, since the tasks overlap enough that it becomes noticeable. It’s not a dealbreaker, but there’s definitely room to add more variety. Review collected by and hosted on G2.com.

Good content that seems to be updated frequently and is appropriate for teams with different skill levels, areas of expertise, and experience. It’s also great for interactive staff training. Review collected by and hosted on G2.com.

This isn’t really a SecureFlag issue, per se, it’s more of a general one. I’m finding it very hard to keep people engaged. If I push it, people will do it, and if there’s a training day people will engage well, but then it seems to tail off again quite quickly. I sent hard to justify when you see no one's logged in for the last six months. Review collected by and hosted on G2.com.

The platform’s labs provide excellent coverage across the tech stack, from traditional programming languages to modern cloud and DevOps infrastructure. Beyond the strength of the product itself, the onboarding process was exceptionally smooth, and the provider’s customer support has been stellar—responsive, helpful, and genuinely invested in our team’s success. Review collected by and hosted on G2.com.

While their current language and cloud coverage is fantastic, we’d love to see them expand their real-environment labs to include more dedicated database-related technologies. In particular, deeper dives into Oracle and MongoDB security training would be a great addition. Review collected by and hosted on G2.com.

When I joined Forward Financing’s security team, we were still building our code security training from the ground up. We were concerned that our developers did not have the proper training for coding, being aware of the security matters. From day one, Secure Flag gave us the structure and visibility we needed to help developers understand the vulnerabilities they might be introducing through code.

Over time, I became the main point of contact for Secure Flag in our team, and that’s because it works. It’s reliable. I know that when something pops up, their amazing team is really great. They're more than just vendors; I feel like they work with us and not for us. Review collected by and hosted on G2.com.

The labs on the learning courses might have some issues when you are using a VPN, but Secure Flag team is aware of that and gives you ideas to solve any issue you might encounter. Review collected by and hosted on G2.com.

SecureFlag was a great platform to use. From a developer perspective, I felt the content was strong, and the labs were very effective for reinforcing what I learned. I also appreciated that the platform keeps its material up to date, which helps it stay current over time. The ability to easily manage the courses and review progress is also very strong and user friendly. Review collected by and hosted on G2.com.

SecureFlag met our requirements well there was nothing that we did not like about the platform. Review collected by and hosted on G2.com.

Easy to use

Extremely interactive labs

High level of technical details

Great customer support Review collected by and hosted on G2.com.

Maybe a bit hard to use for newcomers of IT Security Review collected by and hosted on G2.com.

We appreciate the wide range of features offered: the platform is easy to use, simple to implement, and integrates smoothly with Okta. It also provides numerous learning paths, regularly updates its content, and offers excellent customer support.

This versatile platform delivers more than just content—it creates a gamified experience for our Security Champions program, including tournaments, quizzes, and a points system. Our developers are also pleased with the platform, rating it an average of 9 out of 10. Review collected by and hosted on G2.com.

We don't have any particular feedback at the moment, but it occurs to me that adding an AI chatbot with all the content vectorized in a RAG could be useful. This feature would make it easier for developers to look up security code information. Although we never listed this as a requirement, writing this review made me realize it could be a valuable addition—just something nice to have.

Regarding the Threat Model API, it would be helpful if there were more endpoints available. This would allow for greater automation of workflows and make it possible to create diagrams entirely outside their platform while still using their API. Review collected by and hosted on G2.com.