Understanding: NINJIO Secure Code

Welcome to the NINJIO Secure Code platform guide. This document walks you through the core functionalities, dashboard interface, user administration, learning path configuration, reporting tools, and platform integrations.

1. Dashboard Walkthrough

When logging into the portal, you are greeted by the main Dashboard. This central hub provides an overall snapshot of your organization's learning progress and pending actions:

• Programs Overview: Toggle between programs (such as Secure Development and Security Awareness) to view specific progress widgets and seat utilization.

• User Management Widget: Quickly check seat availability, accepted vs. pending user invites, and empty seats.

• Team Learning Paths: View active paths, overall completion percentages, due dates, and send reminders to enrolled learners.

• Quick Actions Sidebar: Access shortcuts to create learning paths, generate paths, view compliance training, manage team members, view reports, or contact support.

• Role-Based Views: What you see on the dashboard automatically adapts based on your assigned user role (Learner, Group Leader, or Purchaser).

2. User Management & Roles

To manage users, click on Manage Users in the left-hand navigation menu.

Understanding User Roles

• Learner: Standard user who receives and completes course content.

• Group Leader: Administrator/manager who can view program statistics, build learning paths, and manage team members.

• Purchaser: Primary point of contact for the account tenant who manages billing, subscription seats, and account details.

How-to Video:

Adding Users

A. Single User Invitation

1. Click the Invite User button.

2. Enter the user’s Email Address.

3. Select the applicable Program(s) (e.g., Secure Development, Security Awareness).

4. Assign their Role(s) (Learner, Group Leader, Purchaser).

5. Click Invite User and confirm. An email invitation with setup instructions will be sent to the user.

B. Bulk User Invitation

1. Click Bulk Invite (or select Bulk Invite Learners).

2. Select the target Program(s) and click Next.

3. Enter or paste email addresses separated by commas.

4. Confirm and click Send Invites.

Managing Existing Users

• Status Tracking: In the Users in your group table, track whether an invite is Pending or Accepted.

• Filtering & Search: Use the top filter bars to search by name/email or filter by Invite Status, Program, or Role.

• Actions Menu (...): On the far right of any user row:

  • Edit: Adjust user roles or assigned programs.

  • Invitation Details: View or resend invitation details.

  • Delete: Permanently remove the user.

  ⚠️ Note: Deleting a user is a hard delete and will permanently erase all their history and pending program information.

For more detailed information on this step-by-step process, click here.

3. Setting Up Learning Paths

Learning paths allow you to create custom, structured course sequences for your team. Navigate to Learning Paths in the left menu.

You have three ways to create a path:

1. Create Path (+ Create Path): Build a custom path from scratch.

2. Generate Path: Answer questions in an interactive wizard to automatically generate a tailored path.

3. Create Path from Template: Choose from pre-designed templates tailored to the SDLC (Planning, Design, Development, etc.), OWASP, CWE Top 25, or compliance frameworks.

How-to Video:

Step-by-Step Custom Path Setup (+ Create Path):

1. Details: Enter a Path Name (required), select a Due Date via the calendar picker, and optionally add a Description and Author. Click Confirm Details.

2. Courses: Browse or search available courses. Select the check boxes next to the courses you want to include.

   • Sequencing: Courses are numbered in the order you select them. Unchecking and re-checking courses adjusts their sequence order. Click Confirm Courses.

3. Enrollments: Select individual learners or click Select all eligible. Click Confirm Enrollments.

4. Confirmation: Review your path summary and click Confirm Path. Enrolled learners will receive an automated email notification.

   For more detailed information on this step-by-step process, click here.

4. Exporting & Viewing Reports

Navigate to Reports in the left menu to track individual and team compliance.

Report Types

• Your Reports: Available to all users to track personal progress (Course Progress, Learning Path Progress, and Training Transcript).

• Team Reports: Available to Group Leaders and Purchasers to review organization-wide statistics:

  • Learning Path Statistics

  • Group Progress by Learning Path

  • Group Progress by Learning Path and Course

  • Group Progress by Course

  • Group Progress by Program

  • Team Training Transcript

How-to Video:

How to Export Data to CSV:

1. Click View Report next to the desired report.

2. Apply any relevant filters (Program, Course, Progress, or Sort options).

3. Click the Download as CSV button at the top right. The platform will generate and download the report directly to your machine.

For more detailed information on this step-by-step process, click here.

5. Additional Important Features

A. Course Library (Learning Content > Courses)

Browse 200+ micro-learning AppSec courses. Filter by Program, Role (Developer, Architect, Tester, etc.), SDLC Phase (Plan, Design, Develop, Test, Deploy, Maintain), Level, Content Type, or Learning Path Template. Click View Course to preview modules, quizzes, and supplemental resources.

B. Compliance Frameworks (Learning Content > Compliance)

Pre-mapped training packages aligned directly with leading standards, including ISO 27001, PCI DSS, and SOC 2. Click Create Path directly from any compliance card to quickly deploy required training.

C. Hands-on Security Labs (Learning Content > Labs)

Interactive, scenario-based challenges designed to test real-world developer skills. Each lab features a code name, vulnerability focus (e.g., Object Access, SQL Injection), and step-by-step flag hunting with built-in hints.

D. Automated Compliance Integrations (Settings > Integrations)

NINJIO Secure Code seamlessly integrates with automated compliance platforms:

• Vanta: Syncs user accounts and course completion data automatically.

• Drata: Automatically uploads evidence of developer training for compliance audits.

E. Transcripts (Transcript)

Learners can access their Training Transcript at any time to review completed courses and download a consolidated PDF transcript as proof of completion for compliance audits.

Need Assistance?

If you have any questions or require administrative support, navigate to Help & Support in the left sidebar or email support@ninjio.com directly.