SolidLab
SolidLab AST

SolidLab AST

A service for training in secure development, secure coding, and AppSec practices. Includes online learning tools for secure development lifecycle (SDLC) practices and instruments to reinforce material and verify developer knowledge through practical tasks.

Use cases

  • Training SDLC participants in secure application development practices;
  • Regular knowledge checks;
  • Screening new hires during recruitment;
  • Upskilling specialists and updating their knowledge;
  • Reinforcing acquired knowledge and skills;
  • Fast context-based information lookup;
  • Enriching automated security analysis results with additional information;
  • Engaging employees in the secure development process;
  • Promoting the information security function among IT specialists.

Key functional features

Regularly updated content

The service is continuously expanded with modules across secure development areas. Content is updated according to current threats and technologies.

LMS-class online learning system

Enables a systematic approach to developer training with a process tailored to the organization’s needs.

Specialized CTF platform

Helps SDLC participants reinforce knowledge and skills in a gamified format and improve team collaboration.

Knowledge base (wiki)

Provides training module information in a format suitable for quick context search and decision-making, and can enrich automated security analysis.

SolidLab AST

Up-to-date knowledge

Modern courses on secure web and mobile application development with a focus on new design methods and current threats and technologies.

Proven methodology

The methodology considers the audience and practical tasks and uses various approaches to presenting material to improve learning efficiency (from “simple to complex”, storytelling, etc.).

Comprehensive approach

Combining online learning with practical workshops for key process participants, consulting, and adapting materials to customer needs helps build a program that meets requirements.

Professional expertise

Materials are based on our team’s expertise gained in security assessment and secure development practice implementation projects, as well as academic teaching experience at the MSU Faculty of Computational Mathematics and Cybernetics.

Technical support and additional enablement services

  • Development of training plans, methodologies, and programs for step-by-step skill improvement;
  • Adapting training materials to customer needs, relevant threats, and applied technologies;
  • Activities to increase engagement and involvement (CTF formats, Red Team, etc.);
  • Practical workshops for key secure development process participants and future internal trainers;
  • Integration into the customer infrastructure or within a secure development platform;
  • Consulting support for training processes and knowledge assessment procedures.