CircleCi Lufthansa Proemion LogMeIn Photobox SkyScanner

Building a security culture in software engineering

Avatao teaches software developers to write and deploy secure applications. Avatao’s online platform contains almost 800 gamified exercises. It allows developers to learn about security and offers a turn-key solution for businesses to run hands-on labs on demand.

At Avatao every learning experience is an Event. Whether you are a newbie or an expert in security, by attending Avatao events like Hackathons or Workshops, you get a deeper understanding on how to deliver secure code.

Continuous learning Continuous learning
Workshops Workshops
CTFs & Hackathons CTFs & Hackathons
Onboarding Onboarding
Assessment (soon) Assessment (soon)
Certification (soon) Certification (soon)

Avatao technology is highly scalable and able to run a rich diversity of hands-on labs including secure coding, web security or devsecops tools. To achieve this, we use different runtime environments.

Docker-based runtime Docker-based runtime

Docker is the leading containerization technology to isolate computing resources efficiently. Avatao challenges built in this technology are massively scalable, still delivering hands-on learning experience.

Docker-based runtime VM-based runtime (soon)

There are so many cool technologies out there we would love to teach, but docker is simply not enough. Our new virtual machine-based runtime helps to represent more complex problems faced in the cloud native world every day.

How we help?

Learning experience

Learning experience

At Avatao, we recognize that not all developers require the same assistance. That’s why we offer two types of exercises: tutorials and challenges.

Tutorials are based on a helper bot guiding the users through learning steps, whereas challenges are targeting developers with more expertise who can work on their own and ask for hints, if needed.

Security culture

Security culture

Skilled developers build secure systems, use advanced security tools, and rapidly fix the emerging problems. Avatao grants a complex set of security exercises, to offer the best training for various skill levels.

We help companies to nurture a team of security champions to span the knowledge gap between developers and security experts.



We offer a wide variety of topics from secure coding in your favorite languages to cloud native tools you use on a daily basis.

Our team and the community contribute actively to Avatao's library of nearly 800 security exercises. That’s why, we are able to arm developers with diverse and actionable security skills.

Trusted by companies you know

Attila J. Török

“Avatao combines the convenience and accessibility of computer-based training with challenging but solvable, real-world examples, to teach software engineers how to identify and avoid common coding security mistakes. The result? A highly engaging platform that people enjoy, and don’t avoid!

Attila J. Török Director of Security Assurance at LogMeIn

Diniz Cruz

“Avatao is one of my favorite companies. They have one of the most engaging, proactive, and energetic teams I’ve worked with. They always respond to our questions quickly, try to execute ideas that we throw at them - all while paying attention to detail.”

Diniz Cruz CISO at Photobox & active OWASP contributor

Dávid Németh Cs.

“I think solving practical problems is an effective way to learn, so I spent lots of hours playing CTF games and attended competitions in the last 10-15 years. I can confidently say that Avatao challenges cover a wide area, and they could surprise me a couple of times Congrats and keep up the good work guys!”

Dávid Németh Cs. Principal Engineer at Prezi

Popular blog posts

XSS Case Study

Gergő Turcsányi | Apr 18, 2019

You have probably heard about the recent Cross-Site Scripting vulnerability in the Google search engine. With a clever payload you...

I could have stolen your photos from Google - my …

Gergő Turcsányi | Dec 11, 2018

IT security is a really huge topic and until you find your first bug you can’t be sure that you have the required amount of knowledge, luck, and …

How to automate your infrastructure with Ansible in …

Dávid Osztertág | Oct 26, 2018

Here at Avatao, we are big believers in infrastructure-as-code which is a way of infrastructure automation using the practices from software …

Secure collaborative infrastructure deployment …

Kristóf Havasi | Nov 22, 2018

In one of our recent posts, we wrote about the difficulties of adopting infrastructure automation in apreviously static environment. As …

Start developing your skills today