Skip to content

Hall of fame

The security researchers who found flaws in Assessly and reported them to us.

Researchers
15

Researchers

Findings fixed
26

Findings fixed

High or critical
9

High or critical

Standings

Ranked by points: critical 40, high 20, medium 10, low 5. Open a row for the findings.

1Pratham Reet5 findings60
  • Privilege-escalation path from the student roleHigh · Jun 2026
  • Practice-scoring integrity bypassHigh · May 2026
  • Execution-queue abuse vectorMedium · May 2026
  • Client-side maintenance-mode bypassLow · May 2026
  • Anti-cheat event-tampering vectorLow · May 2026
2Bhavya Saini4 findings55
  • Access-control gap that could reveal exam content earlyHigh · May 2026
  • Over-broad data visibility between student accountsHigh · May 2026
  • Code-runner configuration issueLow · May 2026
  • Anti-cheat telemetry bypassMedium · May 2026
3Nishant Lungare2 findings40
  • Over-broad access to practice answer keysHigh · Jun 2026
  • Verified security findingHigh · Sep 2026
4Aryan S2 findings30
  • Verified security findingMedium · Sep 2026
  • Paid service reachable from a free accountHigh · Sep 2026
5Riddhi K1 finding20
  • Proctoring fullscreen-enforcement bypassHigh · May 2026
6Wildanoel1 finding20
  • Answer checker that could reveal answers to graded questionsHigh · Sep 2026
6Yoga Kurniawan2 findings20
  • Verification-code attempt limit bypassMedium · Sep 2026
  • Sign-in lockout abuseMedium · Sep 2026
8Akhin S1 finding10
  • Over-broad role-data visibilityMedium · May 2026
8Pamidi Mohith Eswar1 finding10
  • Unauthenticated access to learning contentMedium · May 2026
10Sumit Shah1 finding10
  • Dangling-DNS subdomain takeover riskMedium · Jul 2026
11Aquib Javed2 findings10
  • Verified security findingLow · Aug 2026
  • Verified security findingLow · Aug 2026
12Bachu Akshaya Sree1 finding5
  • Code-runner configuration issueLow · May 2026
13Nishadhul Hasan1 finding5
  • Internal detail in public configuration textLow · Sep 2026
LinkedIn
13Philip James1 finding5
  • Verified security findingLow · Sep 2026
13Rishaan Anand1 finding5
  • Expired link on the websiteLow · Sep 2026
LinkedIn

What one finding is worth

Points for every valid finding.

Report a flawScope and rules
  1. Critical40points
  2. High20points
  3. Medium10points
  4. Low5points