Sample report. Every name and number is invented.
Tomas Kudrna
Well belowLicenceAssessed work at Fernbrook Systems, last 12 months. Personal training is not counted here and never reaches a team report.
- Submissions
- 6
- Findings caught
- 10 of 14
- Catch rate
- 71%
- Median score
- 61 against a pass mark of 80
Against a frontier model
How a frontier model scored on the same challenges, given the same changes and marked against the same correct answers, with no hints and no walkthrough. The model is not named: these figures are invented for this sample.
- This person
- 61 of 100
- The model, on the same challenges
- 63 of 100
- Difference
- -2 points · within 2 points
Both figures are out of 100 over the 6 challenges of theirs that a published run covers, so they are only compared on work the model has actually done.
Score over time
Every attempt in the order it was made, oldest on the left, against the pass mark.
What they catch and what they miss
The best and worst of this person's own results by weakness category. It is their own detail, not an aggregate, so no minimum cohort applies. The whole breakdown is in the table below.
Strongest
- Authentication100% caught4 found of 40 missed
Weakest
- Access control57% caught4 found of 73 missed
By CWE category
What this reviewer catches and misses, by weakness family.
| Category | Caught | Missed | Catch rate |
|---|---|---|---|
| Access control | 4 | 3 | 57% |
| Authentication | 4 | 0 | 100% |
| Sessions and cookies | 2 | 1 | 67% |
By language
The same breakdown by the language of the codebase reviewed.
| Language | Caught | Missed | Catch rate |
|---|---|---|---|
| TypeScript | 3 | 2 | 60% |
| Java | 7 | 2 | 78% |
Every attempt
Newest first. Times are in UTC.
| Challenge | Score | Grade | Caught | Took | Submitted |
|---|---|---|---|---|---|
A session cookie without its flags dialforgechallenge 4 | 66 | Needs work | 2/3 | 14 min | 13 Aug 2026, 11:14 UTC |
An invitation link that outlives the invitation dialforgechallenge 3 | 95 | Passed | 2/2 | 37 min | 11 Aug 2026, 23:14 UTC |
A one-time code accepted twice dialforgechallenge 2 | 95 | Passed | 2/2 | 35 min | 10 Aug 2026, 11:14 UTC |
Access checked in the page and not in the action leasewellchallenge 2 | 50 | Needs work | 1/2 | 32 min | 8 Aug 2026, 23:14 UTC |
An admin route that trusts the referrer dialforgechallenge 1 | 50 | Needs work | 1/2 | 30 min | 7 Aug 2026, 11:14 UTC |
Invoices listed without the tenant filter leasewellchallenge 1 | 56 | Needs work | 2/3 | 28 min | 5 Aug 2026, 23:14 UTC |