Build your own challenge
Enterprise Admins can create tailored security challenges in AppSecEngineer, specifying language, framework, vulnerability, and difficulty for precise team training.
Steps to Build Your Challenge
-
Access the Challenge Builder:
-
Log in to the Admin Dashboard.
-
Navigate to Sidebar menu> Admin> Build Your Challenge.
-
-
Fill in the Challenge Form:
Programming Language:
-
Choose the primary language relevant to the challenge (e.g., Python, JavaScript, Java).
Enter a Framework:
-
Specify the framework or library that the challenge will focus on (e.g., Flask, React, Spring).
Vulnerability:
-
Select the type of vulnerability the challenge will address (e.g., SQL Injection, Cross-Site Scripting, Insecure Deserialization).
Difficulty Level:
-
Choose the appropriate difficulty level:
-
Beginner
-
Intermediate
-
Advanced
-
Answer Type:
-
Define how the solution will be submitted:
-
Code Submission
-
Short Answer
-
Add Additional Context:
-
Provide any relevant background information or instructions for the challenge.
-
Examples include:
-
Scenario descriptions
-
Objective or expected outcomes
-
Hints or guidelines for solving the challenge
-
-
Review and Submit:
-
Verify the form details to ensure accuracy.
-
Click Submit to save the challenge.
-
Find all your saved challenges by clicking on "View Saved Challenges"
Tips for Effective Challenges
-
Relevance: Focus on vulnerabilities and scenarios that align with your organization’s security priorities.
-
Clarity: Ensure the challenge description and instructions are clear and concise.
-
Engagement: Include hints or additional context to make challenges more engaging and accessible for learners.
-
Testing: Test the challenge to ensure it works as intended before assigning it to teams.
Assign challenges to specific teams by referring to our guide on Assigning Users to a Team