Sample report. Every name and number is invented.
Grace Ntuli
Well belowNo licence nowAssessed work at Fernbrook Systems, last 12 months. Personal training is not counted here and never reaches a team report.
- Submissions
- 6
- Findings caught
- 5 of 14
- Catch rate
- 36%
- Median score
- 45 against a pass mark of 80
Against a frontier model
How a frontier model scored on the same challenges, given the same changes and marked against the same correct answers, with no hints and no walkthrough. The model is not named: these figures are invented for this sample.
- This person
- 45 of 100
- The model, on the same challenges
- 63 of 100
- Difference
- -18 points
Both figures are out of 100 over the 6 challenges of theirs that a published run covers, so they are only compared on work the model has actually done.
Score over time
Every attempt in the order it was made, oldest on the left, against the pass mark.
What they catch and what they miss
The best and worst of this person's own results by weakness category. It is their own detail, not an aggregate, so no minimum cohort applies. The whole breakdown is in the table below.
Strongest
- Sessions and cookies67% caught2 found of 31 missed
Weakest
- Authentication25% caught1 found of 43 missed
By CWE category
What this reviewer catches and misses, by weakness family.
| Category | Caught | Missed | Catch rate |
|---|---|---|---|
| Access control | 2 | 5 | 29% |
| Authentication | 1 | 3 | 25% |
| Sessions and cookies | 2 | 1 | 67% |
By language
The same breakdown by the language of the codebase reviewed.
| Language | Caught | Missed | Catch rate |
|---|---|---|---|
| TypeScript | 1 | 4 | 20% |
| Java | 4 | 5 | 44% |
Every attempt
Newest first. Times are in UTC.
| Challenge | Score | Grade | Caught | Took | Submitted |
|---|---|---|---|---|---|
A session cookie without its flags dialforgechallenge 4 | 66 | Needs work | 2/3 | 33 min | 11 Aug 2026, 15:08 UTC |
A session cookie without its flagsSuperseded by a retake dialforgechallenge 4 | 33 | Needs work | 1/3 | 17 min | 10 Aug 2026, 20:41 UTC |
An invitation link that outlives the invitation dialforgechallenge 3 | 0 | Needs work | 0/2 | 30 min | 10 Aug 2026, 08:08 UTC |
A one-time code accepted twice dialforgechallenge 2 | 45 | Needs work | 1/2 | 28 min | 9 Aug 2026, 01:08 UTC |
Access checked in the page and not in the action leasewellchallenge 2 | 45 | Needs work | 1/2 | 26 min | 7 Aug 2026, 18:08 UTC |
An admin route that trusts the referrer dialforgechallenge 1 | 50 | Needs work | 1/2 | 23 min | 6 Aug 2026, 11:08 UTC |
Invoices listed without the tenant filter leasewellchallenge 1 | 0 | Needs work | 0/3 | 21 min | 5 Aug 2026, 04:08 UTC |