Secure Software for Developers: Review Like an Attacker
Included with TrainMeUK — no separate course purchase required.
Recognise the most common flaws in the OWASP Top 10:2025; spot security problems in a code review; and keep secrets out of code, and rotate any that leak.
- Assign to
- Developers, testers and tech leads
- Duration
- 25 minutes
- Evidence
- 12-question quiz
- Your version
- Editable
What they will be able to do
- Recognise the most common flaws in the OWASP Top 10:2025.
- Spot security problems in a code review.
- Keep secrets out of code, and rotate any that leak.
- Hold the line on exploitable issues under deadline pressure.
The course
- 01The common flaws
- 02Reviewing code
- 03Under pressure
The decision they practise
In the main activity, “Review the pull request”, learners spot the red flags in a realistic document and see the effect of each choice. In “Just merge it”, a chat, learners practise what to say and do when the other person pushes back. The wrong options are things a well-meaning person might genuinely say, and the feedback explains why each one is tempting. Short animations show “Where a committed key ends up” and “Two versions of Thursday night”.
How you know they finished
The 12-question quiz mixes multiple choice and matching questions and returns to the opening story.
Roll it out with
Relevant legislation and guidance
The course draws on these. Which ones apply depends on the organisation and the role. Finishing the course is a training record.
- UK GDPR and the Data Protection Act 2018
- Computer Misuse Act 1990
- Network and Information Systems Regulations 2018 (NIS)
How this course is built
Interactive activity
Learners practise the decision in the course, including what to say when someone pushes back.
Edit it in the builder
On Growth and above, adapt the scenarios and wording to your own workplace, policies and reporting procedures.
A record they finished
The 12-question quiz closes the course, so you can show who completed it.
Related courses
TrainMeUK course library
Ready to make Secure Software for Developers easier?
Give your team access to practical, interactive training, with automated assignments, reminders and completion records managed in one place.