Sample report. Every name and number is invented.
Zeynep Aydogan
PassedLicenceAssessed work at Fernbrook Systems, Q3 2026 so far. Personal training is not counted here and never reaches a team report.
- Submissions
- 6
- Findings caught
- 12 of 14
- Catch rate
- 86%
- Median score
- 100 against a pass mark of 80
Against a frontier model
How a frontier model scored on the same challenges, given the same changes and marked against the same correct answers, with no hints and no walkthrough. The model is not named: these figures are invented for this sample.
- This person
- 100 of 100
- The model, on the same challenges
- 63 of 100
- Difference
- +37 points
Both figures are out of 100 over the 6 challenges of theirs that a published run covers, so they are only compared on work the model has actually done.
Score over time
Every attempt in the order it was made, oldest on the left, against the pass mark.
What they catch and what they miss
The best and worst of this person's own results by weakness category. It is their own detail, not an aggregate, so no minimum cohort applies. The whole breakdown is in the table below.
Strongest
- Access control100% caught7 found of 70 missed
Weakest
- Sessions and cookies67% caught2 found of 31 missed
By CWE category
What this reviewer catches and misses, by weakness family.
| Category | Caught | Missed | Catch rate |
|---|---|---|---|
| Access control | 7 | 0 | 100% |
| Authentication | 3 | 1 | 75% |
| Sessions and cookies | 2 | 1 | 67% |
By language
The same breakdown by the language of the codebase reviewed.
| Language | Caught | Missed | Catch rate |
|---|---|---|---|
| TypeScript | 5 | 0 | 100% |
| Java | 7 | 2 | 78% |
Every attempt
Newest first. Times are in UTC.
| Challenge | Score | Grade | Caught | Took | Submitted |
|---|---|---|---|---|---|
A session cookie without its flags dialforgechallenge 4 | 60 | Needs work | 2/3 | 37 min | 5 Aug 2026, 09:52 UTC |
An invitation link that outlives the invitation dialforgechallenge 3 | 50 | Needs work | 1/2 | 34 min | 4 Aug 2026, 22:17 UTC |
A one-time code accepted twice dialforgechallenge 2 | 100 | Passed | 2/2 | 32 min | 4 Aug 2026, 10:43 UTC |
Access checked in the page and not in the action leasewellchallenge 2 | 100 | Passed | 2/2 | 30 min | 3 Aug 2026, 23:08 UTC |
An admin route that trusts the referrer dialforgechallenge 1 | 100 | Passed | 2/2 | 27 min | 3 Aug 2026, 11:34 UTC |
Invoices listed without the tenant filter leasewellchallenge 1 | 100 | Passed | 3/3 | 25 min | 3 Aug 2026, 00:00 UTC |