Abstract: This paper presents a prototype that embeds security-focused, contextualised learning directly into the software-development workflow. By using trace links which already bind security ...