AttackForge And SecDim Unite To Tackle Persistent Vulnerability Issues

AttackForge®, a global leader in pentest management solutions, and SecDim, a provider of a unique security learning platform, have announced a new solution to address the recurring issue of vulnerabilities resurfacing in penetration tests. This integration aims to enhance the relevance and engagement of secure code training.

Stas Filshtinskiy, Co-Founder of AttackForge, highlighted the persistent problem of recurring vulnerabilities in penetration testing. He noted that these issues often arise due to gaps in knowledge and skills. Traditional secure code training is typically generic and compliance-driven, lacking direct relevance to specific vulnerabilities.

By integrating SecDim’s platform into AttackForge, the solution links real vulnerabilities discovered during penetration tests to security learning exercises. This allows engineers to explore these vulnerabilities in a safe sandbox environment, enabling them to learn, build, and verify their security patches effectively.

The new capabilities provide security and engineering teams with a collaborative environment to explore real vulnerabilities found in their applications. This approach aims to increase skills and knowledge in preventing these vulnerabilities from reoccurring.

Fil Filiposki, Co-Founder of AttackForge, explained that penetration testing often results in recommendations for engineers on how to fix vulnerabilities. The integration with SecDim goes further by enabling engineers to deploy a private learning environment within AttackForge. Here, they can experiment with the recommendations from the pentest.

Developer-Centric Approach

SecDim’s platform focuses on engaging engineers and DevOps teams using developer-centric language. It presents application security and DevSecOps weaknesses as programming challenges in a code repository.

Dr. Pedram Hayati, Founder of SecDim, emphasized that developers are natural problem solvers. However, security is rarely communicated as a software engineering problem. With AttackForge integration, vulnerabilities discovered in recent pentests are presented as programming challenges in a sandbox environment. This allows developers to explore the vulnerability, understand its root cause, experiment, and build robust security patches.

Immediate Availability

This integration is available immediately. All existing customers of AttackForge now have access to the SecDim integration free of charge.

About AttackForge

AttackForge Pty Ltd is a leading provider of penetration testing management and workflow solutions. The company pioneered the world’s first full lifecycle pentest management platform. The AttackForge platform is used daily by hundreds of security teams globally, with a new pentest starting every thirty minutes on average.

The company’s Enterprise product is trusted across various industries including government, healthcare, banking, retail, oil & energy, telecommunications, and other regulated sectors. AttackForge Core is utilized by leading security consultancies, MSSPs, specialized security companies, and professional pentesters.

About SecDim

SecDim is the world's first developer-centric attack and defense wargame platform. It empowers developers and security engineers to collaborate and explore the entire spectrum of a security vulnerability—from finding and exploiting it to remediating it in the code.

SecDim provides wargames and sandboxes that replicate security vulnerabilities inspired by real-world incidents.

For more information about AttackForge products and services, visit AttackForge. To learn more about SecDim’s offerings, visit SecDim.