secure-code
securecode-web
SecureCode Web: Traditional Web & Application Security Dataset
Incident-grounded web security vulnerability dataset with a 4-turn conversational structure and operational defense guidance
Paper | GitHub | Dataset | Model Collection | Blog Post
What's new in v2.7
v2.7 is an integrity release. No examples were added or removed (still 1,625; splits 1,249 / 186 / 190).
Fixed load_dataset. Since the July 2026 releases, load_dataset("scthornton/securecode-web") failed… See the full description on the dataset page: https://huggingface.co/datasets/scthornton/securecode-web.securecoder-benchmark-results
SecureCoder Benchmark Results
Raw results from the SecureCoder thesis benchmark runs (2026): evaluating LLM code generation pipelines for security across multiple benchmarks, models, and agent variants.
Layout
Results come from two benchmark machines and are organized identically:
secbench-runner/ # 203 runs
results/
raw/<benchmark>__<model>__<variant>__k<N>/ # one directory per run
<variant>/
variant_result.json # scored result… See the full description on the dataset page: https://huggingface.co/datasets/TuStaysHome/securecoder-benchmark-results.SecureCodePairs
Dataset Summary
Field
Value
Version
1.2.0
License
MIT
Total code examples
470
LLM security trajectories
30
Languages (15)
Python, Java, JavaScript, TypeScript, Go, PHP, C#, Kotlin, Swift, Rust, Ruby, C, C++, Scala, YAML (Kubernetes)
Frameworks
Flask, Django, FastAPI, Spring Boot, Express, NestJS, Next.js, Laravel, ASP.NET Core, Gin, Android, iOS, Actix, Rails, Qt, Play, gRPC, GraphQL, Kubernetes
New in v1.2.0
+260 records (deep Python/Java packs… See the full description on the dataset page: https://huggingface.co/datasets/ismailtasdelen/SecureCodePairs.securecode
SecureCode: Comprehensive Security Training Dataset for AI Coding Assistants
The largest open security training dataset for AI coding assistants, covering both traditional web security and AI/ML security
Overview
SecureCode combines 2,372 security-focused training examples into a single, unified dataset with HuggingFace configs for flexible loading. Every example provides vulnerable code, explains why it's dangerous, demonstrates a secure alternative, and… See the full description on the dataset page: https://huggingface.co/datasets/scthornton/securecode.securecode-web-archive
SecureCode Web: Traditional Web & Application Security Dataset
Production-grade web security vulnerability dataset with complete incident grounding, 4-turn conversational structure, and comprehensive operational guidance
Paper | GitHub | Dataset | Model Collection | Blog Post
What's new in v2.6
v2.6 restores proper Express.js coverage for the topics whose examples were removed in v2.5.1 (they had
shared one reused answer). 29 new, genuinely distinct Express.js… See the full description on the dataset page: https://huggingface.co/datasets/ChipHolmes/securecode-web-archive.SecureCodeV2_qwen-2.5-7b-instruct_tokenized_vulnerable