With the corona crisis, a lot of people started to play Cards against Humanity over Zoom meetings. Soon after, Cards against Developers was getting a lot of attention. In this blog post, we want to highlight the following topics:

Let us know if you enjoy this blog post!

If you are curious what Crashtest Security is doing when we are not playing Cards against Developers: Check out our super simple online vulnerability scanner.

Why we created a card game as a security company?

As a start-up, it is important that every team member is on the same page when it comes to company goals. The work attitude of every single team member is shaping the office life for everybody. In a large organisation you may be able to drag people around with you, which is not possible in a small team.

As a company grows, structure is getting more important. Currently, we are organising our tasks within two scrum teams. One development team and one sales & marketing team. Quite often, you hear loud laughs of one of the offices (mainly sales and marketing) without hearing their jokes. Unfortunately, developer jokes quite often do not attract any acknowledgement from the sales people. But how could you connect the teams which are both working for a highly technical product again, to laugh together about the same jokes?

During our offsite in the Bavarian alps, we not only did a hiking trip in the Partnach Gorge, but also played a very long round of Cards Against Humanity mixed with Cards Against Cryptography.

The Partnach River

During the game, we spiced it up with a few card that we wrote ourselves and shuffled them into the game during the play. The next day, during our hiking trip, there was an insane flow: Not only of water in the gorge, but also of creativity. At the end of the trip, we ended up having a list of 228 cards for Cards Against Developers on one of our smartphones. The original game is licensed under Creative Commons as Attribution-NonCommercial-ShareAlike (CC BY-NC-SA). Therefore it was possible for us to use the game mechanics and the existing cards. We used the Cards Against Cryptography templates and included some of their cards into our game as well.



Find the whole Cards Against Developers Game on GitHub: https://github.com/crashtest-security/CardsAgainstDevelopers

So, is it only fun and games?

Of course, we had a lot of fun during the creation of our own cards. All team members, regardless of their position in the company were included. Everybody feels proud for the game we all created. The same way, we all feel about our software.

After ten years working as a developer, I am addicted to browsing StackOverflow for hours without actually looking for a solution


Additionally, new cards or changes for the existing cards can be submitted via GitHub. We are using the same processes that we use for our software development for the initial and further development of the cards. A change will be requested using a pull request which is reviewed and finally merged. Our sales & marketing team knew these concepts already from working with our statically generated website (no CMS used here). Using those concepts for game changes as well, makes it easier for us to explain the concepts in a completely non-technical environment.

And of course, everybody is already looking forward to the next round of Cards Against Developers as the next team building experience.

Cards against Developers: How to play online

Due to two very popular posts on Twitter and Reddit, Cards against Developers became very popular.

Screenshot 2020-05-04 at 09.18.52 Screenshot 2020-05-04 at 08.46.56

During the Corona outbreak, a lot of people have to stay home in quarantine. Very often, people meet via online meetings – and what is better than playing a little round of cards against humanity?

Below you can find some links to Cards against Humanity web applications:

  • All Bad Cards
    This service is our favorite, as it has a very clean interface
  • Playingcards.io
    Very simple, basic interface
  • Pretend you’re Xyzzy
    The “console-like” experience (not in the “PS4-console” meaning, but the “1995 setup console of web servers” meaning) 

There are probably more options out there, so please let us know in the comments if you have a cool alternative and we’ll add it.

Adding your own card sets to online games

Cardcast is a site that allows you to build your own set of cards. There are already some cards against developer versions on there. They also have their own chromecast app to play their decks directly.

The cool thing is that you can add these card sets to online games. For All Bad Cards, you can select the decks you want to play before you start a game. For Pretend you’re Xyzzy, you can use the following command in the console:

/addcardcast J9FAA

One last bonus: For all our German followers, here are three German decks that you can add. Enjoy!




Last, but not least: If you found this blog article, chances are you are at least interested in software development. Have you tested your application or API for security vulnerabilities lately?
Why not register for free in our software now, start your scan in 2 minutes, play one round of Cards against Developers, and check your results?