Codebashing is Checkmarx's developer training product. The lessons are short and interactive, you walk through a vulnerable piece of code, see how it gets exploited and fix it. It covers the OWASP Top 10 and around two dozen more vulnerability types across a long list of languages, and there is an 85-lesson path for building security champions inside a team. The feature that sets it apart is the link to the scanner. If Checkmarx One finds SQL injection in a developer's pull request, Codebashing can assign the SQL injection lesson for that language to that developer.
I like this a lot. Most secure coding training fails because it is generic and yearly, and people click through it for the compliance checkbox. Training that arrives next to your own bug is much more likely to stick. The downsides are about access and currency. There is no public price and no way for an individual to buy it, so this review is about a product you will only meet through an employer.
The gamified format makes it easy to rush. And while Checkmarx now markets AI features in its platform, the training has little specific on the new problem most teams have, which is reviewing large amounts of code written by AI assistants that confidently reproduce insecure patterns. Dataforseo shows searches for Codebashing down about 55% year on year, which fits a market where secure coding training is being bundled into platforms rather than bought separately. My take: a good add-on for Checkmarx customers because of the scanner link, but not something to seek out on its own.