Code Review Lab — practice secure code review
loading…
Code review is a skill.
Practice it.
Build the instinct that catches vulnerabilities in review.
loading daily challenge…
Build the instinct that catches vulnerabilities in review.
Build the instinct that catches vulnerabilities in review. Hands-on challenges in real production code.
LatchMate is an Android access app used by apartment residents to unlock lobby doors and their own smart locks. When a resident replaces a phone, they enter their phone number and receive a passwordless login code through Firebase Cloud Messaging. Review the login and push notification flow, especially how sensitive sign-in messages are presented before the user unlocks the device.
“We dropped Code Review Lab into our security training rotation. Two weeks later our engineers were catching things in PR review we'd historically missed.”