--- title: RCSD description: Bypassing traditional exams and multiple-choice tests, RCSD delivers practical learning and hands-on experience in crafting secure code. image: https://reflare.com/hubfs/Reflare%20website%20images/Reflare%20Logos/round%20logo.png --- [![Reflare home](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=421&height=150&name=reflare%20logo.png "Reflare home")](https://reflare.com?hsLang=en) [![logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/logo.png?width=262&height=82&name=logo.png "logo")](https://reflare.com/act3?hsLang=en) [![reflare logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=168&height=60&name=reflare%20logo.png "reflare logo")](https://reflare.com/act3?hsLang=en) - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Login](https://reflare.com/login?hsLang=en) [Buy Now](https://www.hubspot.com/) [Login](https://www.hubspot.com/)Login to your Reflare account - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Buy Now](https://www.hubspot.com/) # IT Security Training for Developers ### RCSD (Reflare Certified Secure Developer) Trainees must apply each video lesson’s attack or defence technique in a live VM setting to move through the program. Bypassing traditional exams and multiple-choice tests, RCSD delivers practical learning and hands-on experience in crafting secure code. [Buy Reflare](https://training.reflare.com/purchase) --- ## Runs in the Cloud You don't need to install anything. All lessons and challenges run entirely on Reflare's cloud infrastructure. This means you can scale to any number of trainees without the concern of ongoing maintenance costs, client-side infrastructure, plug-ins or applications. Scalable Reliable Effortless [Get Started](https://reflare.com/contact-reflare?hsLang=en) ## Pain Free Launch You can add your trainees, set your completion dates, and leave the rest to us. Your developers can take the program at a time that best suits their workflow. Whether on-site, travelling, or remote, the deployment and the completion of RCSD only require an internet connection and a web browser. Efficient Accessible Go Live [Get Started](https://reflare.com/contact-reflare?hsLang=en) ## Work Ready Skills We know developers can only write secure code if they understand how weaknesses are abused. RCSD uses concise, easy-to-follow video lessons that teach both the practical attack and defence techniques for common web vulnerabilities. The developer must then demonstrate that they can translate this understanding into practice in the real world. Clear Practical Relevant [Get Started](https://reflare.com/contact-reflare?hsLang=en) ## Hands-on Testing After each lesson, Reflare boots a VM (virtual machine) that contains a proprietary challenge. To advance to the next lesson, the trainee must successfully either attack or defend the system against the taught vulnerability, proving their comprehension, retention, and practical application of the skill taught. Interactive Application Retention [Get Started](https://reflare.com/contact-reflare?hsLang=en) ## Track Progress We take care of trainee commencement, tracking and deadline reminders. Your easy-to-use admin interface allows you to track the progress of group and individual developers, onboard new team members, pull performance reports, and access completion certificates for compliance audits, all at the click of a button. Monitor Manage Comply [Get Started](https://reflare.com/contact-reflare?hsLang=en) - Implementation - Deployment - Methodology - Evaluation - Reporting - Implementation - Deployment - Methodology - Evaluation - Reporting ![Rakuten](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/Rakuten.png?width=135&height=40&name=Rakuten.png) ![NTT](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/NTT.png?width=110&height=40&name=NTT.png) ![PWC](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/PWC.png?width=79&height=60&name=PWC.png) ![Recruit](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/Recruit.png?width=149&height=40&name=Recruit.png) ![State of Oregon](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/State%20of%20Oregon.png?width=70&height=70&name=State%20of%20Oregon.png) Reflare Certified Secure Developer ## Hands-on capability development with live VM challenges [![rcsd-1](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/rcsd-1.gif?width=1308&height=902&name=rcsd-1.gif) Custom VM Challenges Runs directly in your browser](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/rcsd-1.gif?hsLang=en) [![rcsd-2](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/rcsd-2.gif?width=1308&height=902&name=rcsd-2.gif) Hands-On Evaluation Trainees must solve to proceed](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/rcsd-2.gif?hsLang=en) Reflare Certified Secure Developer (RCSD) Lesson 1 Introduction and How-To Lesson 2 Input Validation - Cross-Site Scripting (XSS) Lesson 3 Client Side Input Validation Lesson 4 Input Validation - SQL Injection (SQLi) Lesson 5 Input Validation - Command Injection (CMDi) Lesson 6 Input Validation - File Uploads Lesson 7 Input Validation - Remote File Inclusion (RFI) Lesson 8 Forced Browsing Lesson 9 Directory Traversal Lesson 10 Authentication Lesson 11 Session Management Lesson 12 Authorisation Lesson 13 Sniffing, MITM and SSL Lesson 14 Open Redirects Lesson 15 Cross-Site Request Forgery (CSRF) Lesson 16 Information Leakage Lesson 17 Browser Security Measures Lesson 18 Simple Scanner Usage Lesson 19 XPath Injection Lesson 20 Buffer Overflows Lesson 21 Secure Cryptographic Storage Lesson 22 Encrypted Databases Lesson 23 Logging Lesson 24 Environment Separation Lesson 25 Closing Thoughts Minimum time commitment to complete RCSD training: 4 hours. --- #### About Reflare We help customers increase cyber resilience with the #1 hands-on IT security training platform. Our developer, administrator, and non-technical user training programs enhance user skills, fulfil your compliance needs, and contribute to developing more secure technologies. Legal - [Terms of Service](https://reflare.com/terms?hsLang=en) - [Privacy Statement](https://reflare.com/privacy?hsLang=en) - [Cookie Info](https://reflare.com/cookies?hsLang=en) - [Copyright and Citation Enquiries](https://reflare.com/citation?hsLang=en) - [Contact](https://reflare.com/contact?hsLang=en) © 2026 Reflare Ltd, and/or its affiliates.   /   In business since 2009.