Sample report. Every name and number is invented. The paid product is not on sale yet.
Grace Ntuli
Needs workNo seat nowAssessed work at Fernbrook Systems, all time. Personal training is not counted here and never reaches a team report.
- Submissions
- 6
- Findings caught
- 5 of 14 planted
- Catch rate
- 36%
- False positives
- 2
- Median score
- 34 against a pass mark of 70
Against a frontier model
How a frontier model scored on the same challenges, given the same diffs and marked against the same answer key, with no hints and no walkthrough. The model is not named, because these figures are invented for this sample and an invented number under somebody else's product name is a claim about their product.
- This person
- 34 of 100
- The model, on the same challenges
- 63 of 100
- Difference
- -29 points
Both figures are out of 100 over the 6 challenges of theirs that a published run covers, so they are only compared on work the model has actually done.
Score over time
Every attempt in the order it was made, oldest on the left, against the pass mark.
What they catch and what they miss
The best and worst of this person's own results by weakness category. It is their own detail, not an aggregate, so no minimum cohort applies. The whole breakdown is in the table below.
Strongest
- Sessions and cookies67% caught2 found of 3 planted1 missed
Weakest
- Authentication25% caught1 found of 4 planted3 missed
By CWE category
What this reviewer catches and misses, by weakness family.
| Category | Caught | Missed | Catch rate |
|---|---|---|---|
| Access control | 2 | 5 | 29% |
| Authentication | 1 | 3 | 25% |
| Sessions and cookies | 2 | 1 | 67% |
By language
The same breakdown by the language of the codebase reviewed.
| Language | Caught | Missed | Catch rate |
|---|---|---|---|
| TypeScript | 1 | 4 | 20% |
| Java | 4 | 5 | 44% |
Every attempt
Newest first. Times are in UTC.
| Challenge | Score | Caught | False positives | Took | Submitted |
|---|---|---|---|---|---|
A session cookie without its flags dialforgechallenge 4 | 93 | 2/3 | 0 | 33 min | 11 Aug 2026, 15:08 UTC |
A session cookie without its flagsSuperseded by a retake dialforgechallenge 4 | 33 | 1/3 | 1 | 17 min | 10 Aug 2026, 20:41 UTC |
An invitation link that outlives the invitation dialforgechallenge 3 | 0 | 0/2 | 0 | 30 min | 10 Aug 2026, 08:08 UTC |
A one-time code accepted twice dialforgechallenge 2 | 35 | 1/2 | 0 | 28 min | 9 Aug 2026, 01:08 UTC |
Access checked in the page and not in the action leasewellchallenge 2 | 33 | 1/2 | 1 | 26 min | 7 Aug 2026, 18:08 UTC |
An admin route that trusts the referrer dialforgechallenge 1 | 50 | 1/2 | 0 | 23 min | 6 Aug 2026, 11:08 UTC |
Invoices listed without the tenant filter leasewellchallenge 1 | 0 | 0/3 | 1 | 21 min | 5 Aug 2026, 04:08 UTC |