# SecureCodingHub

> SecureCodingHub is an interactive secure-coding training platform for developers and engineering teams. Learners work through real code-review challenges, find vulnerabilities, and choose the correct fix. The content covers OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Top 10, CWE Top 25, PCI DSS v4.0.1 requirement 6.2.2, and the EU Cyber Resilience Act.

SecureCodingHub is operated by LimePlate, Inc. (Newark, Delaware, USA). The training platform is delivered as a web application with optional SCORM 1.2 and SCORM 2004 packages for LMS integration, SAML 2.0 single sign-on, and SCIM 2.0 user provisioning.

## Product

- [Product overview](https://www.securecodinghub.com/product): What SecureCodingHub does, the practice and learn modes, and which audiences it serves.
- [Interactive demo](https://www.securecodinghub.com/demo): Try the platform without an account. No sign-up required.
- [Free prompt-injection tester](https://www.securecodinghub.com/tools/prompt-injection-tester): Browser-only static analyzer for AI agent system prompts. Twelve heuristic rules plus fifty known prompt-injection attacks.
- [Pricing inquiry and contact form](https://www.securecodinghub.com/contact): Reach the SecureCodingHub team.

## Compliance and security

- [PCI DSS v4.0.1 compliance](https://www.securecodinghub.com/compliance/pci-dss): How SecureCodingHub maps to PCI DSS v4.0.1 requirement 6.2.2 and requirement 12.6.1.
- [Security and trust](https://www.securecodinghub.com/security): Authentication, data security, hosting, and operational practices.
- [Privacy policy](https://www.securecodinghub.com/privacy)
- [Terms of service](https://www.securecodinghub.com/terms)
- [Cookie policy](https://www.securecodinghub.com/cookie-policy)

## Documentation

- [Documentation index](https://www.securecodinghub.com/docs)
- [Quick start guide](https://www.securecodinghub.com/docs/getting-started/quick-start)
- [Platform overview](https://www.securecodinghub.com/docs/getting-started/platform-overview)
- [SSO overview](https://www.securecodinghub.com/docs/sso/overview)
- [Azure AD SSO setup](https://www.securecodinghub.com/docs/sso/azure-ad)
- [Okta SSO setup](https://www.securecodinghub.com/docs/sso/okta)
- [SAML setup](https://www.securecodinghub.com/docs/sso/saml)
- [SCIM overview](https://www.securecodinghub.com/docs/scim/overview)
- [Okta SCIM setup](https://www.securecodinghub.com/docs/scim/okta-setup)
- [Azure AD SCIM setup](https://www.securecodinghub.com/docs/scim/azure-ad-setup)
- [SCORM overview](https://www.securecodinghub.com/docs/scorm/overview)
- [SCORM package download](https://www.securecodinghub.com/docs/scorm/package-download)
- [SCORM LMS setup](https://www.securecodinghub.com/docs/scorm/lms-setup)
- [Admin: managing users](https://www.securecodinghub.com/docs/admin/managing-users)
- [Admin: teams](https://www.securecodinghub.com/docs/admin/teams)
- [Admin: assignments](https://www.securecodinghub.com/docs/admin/assignments)
- [Admin: dashboard](https://www.securecodinghub.com/docs/admin/dashboard)
- [Admin: roles and permissions](https://www.securecodinghub.com/docs/admin/roles-permissions)
- [Learner: practice mode](https://www.securecodinghub.com/docs/learners/practice-mode)
- [Learner: learn mode](https://www.securecodinghub.com/docs/learners/learn-mode)
- [Learner: stack preferences](https://www.securecodinghub.com/docs/learners/stack-preferences)
- [Learner: tracking progress](https://www.securecodinghub.com/docs/learners/tracking-progress)
- [Security: authentication](https://www.securecodinghub.com/docs/security/authentication)
- [Security: data security](https://www.securecodinghub.com/docs/security/data-security)

## Security guides (OWASP, CWE, vulnerability deep dives)

- [Security guides index](https://www.securecodinghub.com/guides)
- [API security](https://www.securecodinghub.com/guides/api-security)
- [Broken access control](https://www.securecodinghub.com/guides/broken-access-control)
- [SQL injection](https://www.securecodinghub.com/guides/sql-injection)
- [Cross-site scripting (XSS)](https://www.securecodinghub.com/guides/xss)
- [DOM-based XSS](https://www.securecodinghub.com/guides/dom-xss)
- [CSRF](https://www.securecodinghub.com/guides/csrf)
- [SSRF](https://www.securecodinghub.com/guides/ssrf)
- [XXE](https://www.securecodinghub.com/guides/xxe)
- [Insecure deserialization](https://www.securecodinghub.com/guides/insecure-deserialization)
- [Cryptographic failures](https://www.securecodinghub.com/guides/cryptographic-failures)
- [Authentication failures](https://www.securecodinghub.com/guides/authentication-failures)
- [Sensitive data exposure](https://www.securecodinghub.com/guides/sensitive-data-exposure)
- [JWT vulnerabilities](https://www.securecodinghub.com/guides/jwt-vulnerabilities)
- [Hardcoded secrets](https://www.securecodinghub.com/guides/hardcoded-secrets)
- [Command injection](https://www.securecodinghub.com/guides/command-injection)
- [Path traversal](https://www.securecodinghub.com/guides/path-traversal)
- [Open redirect](https://www.securecodinghub.com/guides/open-redirect)
- [Race conditions](https://www.securecodinghub.com/guides/race-conditions)
- [Mass assignment](https://www.securecodinghub.com/guides/mass-assignment)
- [IDOR](https://www.securecodinghub.com/guides/idor)
- [Supply-chain attacks](https://www.securecodinghub.com/guides/supply-chain-attacks)
- [Vulnerable components](https://www.securecodinghub.com/guides/vulnerable-components)
- [Dependency confusion](https://www.securecodinghub.com/guides/dependency-confusion)
- [Prototype pollution](https://www.securecodinghub.com/guides/prototype-pollution)

## Blog and long-form articles

- [Blog index](https://www.securecodinghub.com/blog)
- [EU Cyber Resilience Act developer guide](https://www.securecodinghub.com/blog/eu-cyber-resilience-act-secure-development-developers-guide)
- [PCI DSS awareness training 12.6.1 guide](https://www.securecodinghub.com/blog/pci-dss-awareness-training-12-6-1-guide)
- [PCI DSS 4.0.1 secure coding training 6.2.2](https://www.securecodinghub.com/blog/pci-dss-4-0-1-secure-coding-training-6-2-2)
- [PCI DSS non-compliance costs](https://www.securecodinghub.com/blog/pci-dss-non-compliance-cost-fines-and-penalties)
- [PCI DSS training programs buyer guide](https://www.securecodinghub.com/blog/pci-dss-compliance-training-programs-buyer-guide)
- [OWASP Top 10 2025 changes](https://www.securecodinghub.com/blog/owasp-top-10-2025-changes)
- [OWASP injection A03 developer guide](https://www.securecodinghub.com/blog/owasp-injection-a03-developer-guide)
- [OWASP insecure design A04 developer guide](https://www.securecodinghub.com/blog/owasp-insecure-design-a04-developer-guide)
- [Cross-site scripting (XSS) developer guide](https://www.securecodinghub.com/blog/cross-site-scripting-xss-developer-guide)
- [Stored XSS developer guide](https://www.securecodinghub.com/blog/stored-cross-site-scripting-xss-developer-guide)
- [DOM-based XSS developer guide](https://www.securecodinghub.com/blog/dom-based-cross-site-scripting-xss-developer-guide)
- [XSS prevention defense in depth](https://www.securecodinghub.com/blog/xss-prevention-defense-in-depth-developer-guide)
- [XSS vs CSRF comparison](https://www.securecodinghub.com/blog/xss-vs-csrf-difference-comparison-developer-guide)
- [API authentication and authorization](https://www.securecodinghub.com/blog/api-authentication-authorization-developer-guide)
- [CTF for developers: how to start](https://www.securecodinghub.com/blog/capture-the-flag-ctf-for-developers-how-to-start)
- [What is a CWE](https://www.securecodinghub.com/blog/what-is-a-cwe-common-weakness-enumeration-developer-guide)
- [Bug bounty programs for developers](https://www.securecodinghub.com/blog/what-is-a-bug-bounty-program-developers-guide)
- [Cybersecurity risk assessment for developers](https://www.securecodinghub.com/blog/cybersecurity-risk-assessment-developer-guide)
- [Secure code review best practices](https://www.securecodinghub.com/blog/secure-code-review-best-practices)
- [Real cost of insecure code](https://www.securecodinghub.com/blog/real-cost-of-insecure-code)
- [SCA software composition analysis guide](https://www.securecodinghub.com/blog/sca-software-composition-analysis-developer-guide)
- [SAST vs DAST vs IAST](https://www.securecodinghub.com/blog/iast-vs-dast-vs-sast-comparison-guide)
- [Broken access control OWASP explained](https://www.securecodinghub.com/blog/broken-access-control-owasp-explained)
- [OWASP API Security Top 10 2023 developer guide](https://www.securecodinghub.com/blog/owasp-api-security-top-10-2023-developer-guide)
- [OWASP authentication failures A07](https://www.securecodinghub.com/blog/owasp-authentication-failures-a07-developer-guide)
- [OWASP cryptographic failures A02](https://www.securecodinghub.com/blog/owasp-cryptographic-failures-a02-developer-guide)
- [OWASP security misconfiguration deep dive](https://www.securecodinghub.com/blog/owasp-security-misconfiguration-deep-dive)
- [What is secure code](https://www.securecodinghub.com/blog/what-is-secure-code-definition-examples-developer-guide)

## Company

- [About SecureCodingHub](https://www.securecodinghub.com/about)
- [Team](https://www.securecodinghub.com/about/team)
- [Partner program](https://www.securecodinghub.com/partners)
- [Changelog](https://www.securecodinghub.com/changelog)

## Authors

- [Caner Özden — Founder & Application Security Lead](https://www.securecodinghub.com/authors/caner-ozden)
- [Melissa Benian — Head of Partnerships & Customer Success](https://www.securecodinghub.com/authors/melissa-benian)
- [Emre Sakarya — Senior Engineer](https://www.securecodinghub.com/authors/emre-sakarya)
- [Dr. Ceren Küpeli — Legal Counsel](https://www.securecodinghub.com/authors/ceren-kupeli)

## Contact

- General: hello@securecodinghub.com
- Sales: sales@securecodinghub.com
- Support: support@securecodinghub.com
- Office: LimePlate, Inc., 131 Continental Dr Suite 305, Newark, DE 19713, United States