WeHackPurple

What WeHackPurple does

WeHackPurple (operating under the brand SheHacksPurple and the legal entity She Hacks Purple Consulting) is a Victoria, Canada-based private training and coaching company founded by Tanya Janca. The company delivers high-impact, live secure-coding training directly to engineering teams, supplemented by private speaking engagements, two best-selling books ("Alice and Bob Learn Secure Coding" and "Alice and Bob Learn Application Security"), and the DevSec Station Podcast hosted by the founder. There is no proprietary software platform, app, or API; the underlying offering is the founder's expertise, not a technology stack.

The firm is a founder-led professional services business with a horizontal segmentation approach targeting engineering teams and developers as the primary segment and security practitioners as a secondary segment. Marketing and distribution are driven almost entirely through Tanya Janca's personal brand, community initiatives (OWASP DevSlop, #CyberMentoringMonday, WoSEC, SecureCodingGuideline.com, SecureMyVibe.ca), and her contributor role on the OWASP Top Ten. Sales are sourced through direct outreach and email enquiry, with a separate US-facing entity (Janca Security Services Inc.) handling American clients only.

Revenue mechanics are straightforward: professional-services fees for live training and speaking engagements, plus one-time book royalties. With 1–10 employees, no external funding, and no institutional ownership, the company is bootstrapped and founder-controlled, and its growth is effectively capped by the founder's delivery capacity.

Name

WeHackPurple

Legal name

SheHacksPurple

Website

https://wehackpurple.com

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

1–10 employees

Short description

WeHackPurple (SheHacksPurple) is a Victoria, Canada-based private training and coaching company that delivers live secure-coding training, speaking engagements, books, and a podcast to engineering teams and security practitioners worldwide, anchored by founder Tanya Janca's personal brand.

Ownership category

akta.pro rank

Product category

Cybersecurity Training

NAICS

Computer Training (61142), Computer Training (611420)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Secure Software & DevOps Awareness (Secure Coding Basics) (EDABAGAN)

akta.pro secondary industry

Application Security & Secure Software (DevSecOps) (EDAOAIAK)

Keywords

• Secure coding training
• Application security education
• Cybersecurity consulting
• Developer security training
• Application security training

Headquarters

HQ city

Victoria

HQ country

Canada

HQ region

North America

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Marketing or Sales, Operations, Technology or R&D

Revenue model

1. Training Services: High-impact, live secure-coding training delivered to engineering teams. This appears to be the primary revenue stream, with private training engagements for organizations.
2. Speaking Engagements: Private speaking engagements available for organizations seeking secure coding and application security expertise from Tanya Janca.
3. Book Sales: Sale of published books including 'Alice and Bob Learn Secure Coding' and 'Alice and Bob Learn Application Security', both best-selling titles in the application security space.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

WeHackPurple delivers high-impact, live secure-coding training and application security consulting directly to engineering teams, led personally by founder Tanya Janca. Offerings also include two best-selling books on secure coding and application security and the DevSec Station Podcast. Engagements are arranged via direct email contact and include both private training sessions and speaking engagements.

Product overview

WeHackPurple, led by Tanya Janca (SheHacksPurple), is primarily a consulting and training company rather than a software product company. The offerings include two published books ('Alice and Bob Learn Secure Coding' and 'Alice and Bob Learn Application Security'), the 'DevSec Station Podcast' hosted by Tanya, and live secure-coding training programs delivered through She Hacks Purple Consulting. The company focuses on application security education and training for developers and security practitioners rather than a unified software platform.

Differentiator

Problem solved

Functional benefit

Products and services

• Live Secure Coding Training

Quantifiable outcome

• Trained thousands of developers and security practitioners

Segments2 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Three partnerships are on record, tiered minor and core.

• SmithyminorOthersListed as an Advisor to SheHacksPurple. Smithy is a security advisor providing guidance to the company.
• ICTC PAC (Information and Communications Technology Council Policy Advisory Committee)minorOthersListed as an Advisor to SheHacksPurple. ICTC PAC provides policy advisory guidance.
• OWASP (Open Web Application Security Project)coreStrategic or Co-development PartnerTanya Janca is a contributor to the OWASP Top Ten project and founded the OWASP DevSlop module. This represents a significant contribution to the application security community and standards development.

Scale indicators3 records

Recent moves5 records

Expansion highlights3 records

Broad incumbents

• Snyk: Snyk is a broad incumbent in developer security, offering tools for code, dependency, and container security. While primarily a product company, Snyk also invests in developer security education and competes for the same buyer budgets.
• Pluralsight: Pluralsight is a broad technology skills training platform that includes secure coding and DevSecOps courses. It serves the same developer upskilling buyer as WeHackPurple via an asynchronous, library-based model.
• O'Reilly Media: O'Reilly is a broad incumbent in technical learning content including books, video courses, and live training on application security topics. It overlaps with WeHackPurple in publishing and training for developers on secure coding.
• Cybrary: Cybrary is a broader cybersecurity training platform offering courses across many security domains including application security. It overlaps with WeHackPurple in serving security practitioners seeking developer security skills.
• Veracode: Veracode is a broad incumbent in application security testing and also offers secure developer training solutions. It overlaps with WeHackPurple in the application security training segment serving enterprise engineering teams.

Emerging players

• AppSec Labs: AppSec Labs offers application security training and consulting for developers and security teams. It is an emerging player that competes in the same niche of hands-on secure coding training that WeHackPurple addresses.

Direct peers

• Trail of Bits: Trail of Bits is a security consulting and research firm that also produces developer-focused security training and educational content. It competes with WeHackPurple for AppSec training engagements with engineering teams.
• Security Journey: Security Journey provides secure coding and application security training programs for engineering teams. It directly competes with WeHackPurple's core offering of training developers on secure coding practices.
• Secure Code Warrior: Secure Code Warrior is a direct competitor offering a secure coding training platform for developers. It competes with WeHackPurple in the same category of developer-focused application security education, though via a SaaS platform rather than live instructor delivery.
• Kontra: Kontra offers interactive secure coding training tailored for developers, focusing on application security fundamentals. It competes with WeHackPurple in delivering secure coding education to engineering teams.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights5 records

Customer concentration

• Xx.com/wehackpurple
• LinkedInlinkedin.com/company/wehackpurple

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about WeHackPurple