SecDim Reviews & Product Details

I used SecDim during the NDC Oslo 2026 conference. It was a delightful experience around a king-of-the-hill CTF wargame versus other folks at the conference, while learning about AI prompt injection attacks. How to execute them, and how to defend from them at the same time. I sincerely believe that's a great approach about security, it's hard to defend from something if you have never tried breaching it.

So the competition approach during a conference had a fascinating pull on me, pushing me to learn about AI security even while tired at the evening of a conference. Highly recommend trying out this experience to learn more about security. Review collected by and hosted on G2.com.

We had some issues during the wargame, finding out that sometimes the platform wouldn't have deployed the latest version of the application to defend. Even then, though, Pedram and team have helped in getting support on this quickly and finding out where the issue was - in the platform, in my connection to it, in my late-evening conference beers... Review collected by and hosted on G2.com.

What I like most about SecDim is how effectively it shifts application security from being mainly a security-team responsibility to becoming a practical capability within engineering.

We used it as part of a broader DevSecOps program. The goal wasn’t just to have developers complete security training, but to help them recognize, understand, and prevent real vulnerabilities in their day-to-day work. The hands-on approach, realistic scenarios, and emphasis on learning by doing made a noticeable difference compared with traditional awareness training.

It also fit especially well with our Security Champions model and our broader shift-left initiatives. SecDim gave developers a practical environment to build security skills, while our security team could focus on enabling teams, improving controls, and embedding security into the development lifecycle - instead of repeatedly covering the same fundamentals.

For me, the biggest value is that it treats developers as engineers rather than compliance recipients. That makes security training much easier to integrate into an engineering culture. Review collected by and hosted on G2.com.

The main area I would improve is the learning curve for developers who are newer to application security. Some of the challenges become technically demanding quite quickly, so more adaptive guidance, progressive hints, and clearer paths from beginner to advanced levels would make it easier to roll out across engineering teams with very different levels of security maturity.

There are also some areas of the user experience that could be streamlined. As the platform has grown, reducing unnecessary navigation and making the journey from assignment to hands-on exercise even more seamless would help.

Finally, real-world vulnerabilities are often architectural rather than isolated coding mistakes. I would love to see SecDim continue expanding scenarios that require developers to think beyond fixing a specific function and consider design-level security decisions as well. Review collected by and hosted on G2.com.

The challenges I pulled ended up being things I hadn’t seen before. I’d never encountered a language like zecdim.abap, and even though the security issue was obvious and basically screaming in my face, I still ran into the reality that anyone inheriting ancient code eventually faces: you’ve got to get it to compile.

And it can be just as finicky as Python with whitespace, let me tell you.

Overall, it was a very memorable challenge, and it’s left me wanting more. So, I just played the CTF, my company doesn't currently have a solution in this space, but SecDim is top of mind... I liked the challenges better than Secure Code Warrior. Not that SCW has bad challenges, but SecDim was harder. Review collected by and hosted on G2.com.

Probably the main issue for me is the amount of time allowed for the challenges. I understand that I was entering a contest, but I guess I’m a bit slow on the uptake and could use a little more time. Review collected by and hosted on G2.com.

They consistently provide the latest content in this space, whether it’s related to a new incident or even AI. The depth of coverage is strong and, in my experience, beats other providers in this market. Review collected by and hosted on G2.com.

SecDim offers a lot of valuable content, but it can be challenging to find time to work through everything. Shorter learning pathways and bite sized 5 to 10 minute modules that can be completed during a commute or between meetings, along with a mobile app experience, would make it easier to engage with content regularly. Review collected by and hosted on G2.com.

It uses real challenges to teach security Review collected by and hosted on G2.com.

I don't have things that I don't like about it Review collected by and hosted on G2.com.

I like SecDim's labs and how easy they are to set up. They make learning very fun and engaging, providing an interactive way to grasp concepts. Review collected by and hosted on G2.com.

I think it would be great if SecDim included more labs, particularly non-AI ones. Having more options would enhance the learning experience for users like me. Review collected by and hosted on G2.com.

I appreciate how developer-focused SecDim is. I find learning much more enjoyable and engaging when it's interactive, and SecDim delivers on that. For anyone truly interested in improving their secure coding skills, the way SecDim is designed with its use of gamification makes it easy to get drawn in and stay motivated. Review collected by and hosted on G2.com.

Nothing as such. I don't have anything I dislike Review collected by and hosted on G2.com.

SecDim is as close to the "real thing" of finding and fixing vulnerabilities in source code as possible to find on the market. I first used the platform for the DEFCON AppSec CTF, where I immediately was fascinated by the technical side of the platform: Integrating with tools we use daily, the challenges themselves are without extra fluff, direct to the point and show how hard it can be to take into account all of the possible edge cases.

We're a penetration testing firm, and we use SecDim in our Secure Coding workshops with great success. It's easy enough to set up for a 1-day-workshop and has challenges for different skill levels, allowing us to challenge seniors while not leaving juniors behind. What I love here is that each challenge exists in variants for many different frameworks –

We're even seeing activity after the trainings, which shows how good the "game loop" of SecDim is. Review collected by and hosted on G2.com.

The only thing I can come up is that there are no licenses tailored to our mode of use. I'd love to have licenses for a few days or weeks as well. Review collected by and hosted on G2.com.

SecDim is very easy to use, and mimics the real-world experience of finding and fixing security vulnerabilities in source code. It is full of application security labs, each with their own repository, test cases and CI/CD pipeline. This lets software engineers, like myself, actually fix issues in a way that is very similar to how we would do it at our workplace. You can experiment, see what works, what doesn't, and think more deeply about what the vulnerability is and the various ways to fix it.

They also have personal memberships, so that everyone whether they are software engineers, students, independent consultants, or open source maintainers can use SecDim to upskill. They even have pre-built virtual machines that you can connect to via the web browser in case you don't want to or can't use your local system for the challenges. Review collected by and hosted on G2.com.

While many of the labs are inspired after real-life incidents, some of them are a tad contrived in order to allow the user to focus on the specific fix. The underlying issue that needs to be fixed is, in some cases, an architectural issue, and involves more than just fixing the logic in single function or two. There should be a description of what the static interface is that must not be changed. Review collected by and hosted on G2.com.

I really appreciate how SecDim produces relevant and practical content, setting realistic expectations after completing each challenge. The platform is user-friendly and feature-rich, making it easy to navigate and highly engaging.

In a fast-paced tech environment, the more you use this platform, the more exposure and skill growth engineers gain. Additionally, their knowledgeable and responsive customer support team ensures a smooth experience, especially for first-time users.

Implementation is straightforward, and the platform can be easily integrated with other systems when needed, making SecDim a valuable tool for continuous learning and capability development. Review collected by and hosted on G2.com.

Nothing much about what to be dislike on SecDim, some features and improvement still ongoing but current platform and services indeed meet the current industry needs. Review collected by and hosted on G2.com.