Bug pack
The broken-trust pack
“A customer saw something that wasn’t theirs.” Object-level authorization and payload exposure, hunted together.
Choose your app
The stack grades as one session — every member bug type this app hosts is in scope at once.