Security champions

Train your security champions on the PRs AI writes.

Security champions are the developers who catch security problems in code review. DiffDojo gives them realistic AI-written PRs to practise on, and gives you a view of what the group catches.

The security set

Eight PRs from the library's security category, two per stack. Start here, then move on to the rest of the library.

• Search users by name Python
• Add an invoice void endpoint Python
• Auth middleware for the API Node
• Only accept image avatars on upload Node
• Send users back to where they started after login Angular
• Flatten the admin route guard to guard clauses Angular
• Show the search term in the results heading React
• Add the export-history panel React

How a team runs it

Create a team for your champions and share its invite link. Set Security as the team focus and work through the set, then the library. Once three members have reviewed security PRs, the team view shows how many the group catches and what to practise next; a PR's own results appear once three members have reviewed it.

What it costs

Start with the 30-day free pilot: 5 seats, lead included, no card. After that, €300 per month per team up to 8 seats, then €30 per extra seat, by EUR B2B invoice. Read the pilot terms.

Security champion questions

Is this a penetration test or a scanner?

No. It trains people to spot security bugs while reviewing a pull request, before the code ships.

Will I see each champion's results?

No. Results are shown for the team as a whole. The lead sees each member's PR count and last active date, never their scores or review comments.

DiffDojo for teams · Create a team · Demo dashboard · Pilot terms · FAQ · One-pager · For bootcamps and courses · Hiring take-home · 4-week program · Onboarding new developers · Security champions