Neura Market
secure-code-game logo

secure-code-game

Free

Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minu

CybersecurityFreeFree tier
Type
Open Source
Company
GitHub
Visit Website GitHub (2.7k stars)

About secure-code-game

Secure Code Game is a free, open-source interactive game from GitHub Security Lab that teaches developers, students, and anyone curious about security how to identify and fix code vulnerabilities. Players work through challenges directly in their browser via GitHub Codespaces—no installation required. Each challenge takes about 15–30 minutes and focuses on real-world security flaws, including prompt injection in the latest AI-themed season. The game has been played by over 10,000 developers and is praised for making security training fun and effective, with testimonials from companies like Boeing and Alcon. Contributions to create new levels are welcome on GitHub.

Key Features

In-browser gameplay using GitHub Codespaces (no installation)
Open source and completely free
Multiple seasons covering real-world vulnerabilities (e.g., prompt injection in season 3)
Hands-on learning by doing with immediate practice
Each challenge takes 15–30 minutes; seasons have 5–6 challenges
Contribute new game levels via GitHub
Suitable for developers, students, and security newcomers

Pros & Cons

Pros
  • Free and open source with no cost
  • No installation required; runs entirely in the browser
  • Fun, gamified approach that increases engagement
  • Practical, hands-on experience with real vulnerabilities
  • Community-driven—anyone can contribute new challenges
  • Already used and endorsed by major organizations like Boeing and Alcon
  • Suitable for all experience levels, from students to professionals
Cons
  • Requires a GitHub account and internet connection
  • Focuses narrowly on code security vulnerabilities, not broader security topics
  • Limited to existing challenges unless you contribute new ones
  • May not be comprehensive enough as a standalone security course

Best For

Developer security training and upskillingCybersecurity education for computer science studentsInternal company hackathons or team security eventsSelf-paced learning for anyone interested in secure coding

Alternatives to secure-code-game

giskard-oss

🐢 Open-Source Evaluation & Testing library for LLM Agents

ai-captcha-bypass

AI Captcha Bypass

backdoor-learning-resources

A list of backdoor learning resources

claude-bug-bounty

AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.

agentic-radar

A security scanner for your LLM agentic workflows

FAQ

Can I use it internally in my company or as part of a hackathon?
Yes, you can use the Secure Code Game in your organization or as part of developer events.
How long does it take to complete it?
Each challenge takes approximately 15–30 minutes depending on your experience level. Each season consists of 5–6 challenges.
Is it free? Do you offer anything else for free?
Yes, the Secure Code Game is open source and completely free.
Do I need to install something?
No installation required! The game runs directly in your browser using GitHub Codespaces.