the brief
THE TICKET
“Open devtools — the response is carrying fields customers were never meant to see.” That class of defect is planted in TapTrust Federal (TapTrust Federal Credit Union). Same mistake you've met elsewhere — this app's version of it.
WHAT A WORKING TESTER WOULD ASK
Does the response body contain any field the interface never shows, and who was that field written for?
WHERE TO WORK
— The client-facing account payload, read raw
YOUR JOB
Reproduce it, then file a report for every defect you can pin down — what you saw, what you expected, exact steps. One planted defect is in scope.
Medium·banking·bring tools
what we grade
Coverage
Each bug found, weighted by severity
Severity class.
Correct triage of each bug
Reproduction quality
Clear, ordered, reproducible steps
Evidence
Environment, test data, proof
file a report
Nothing filed yet — open the composer and write it down before it gets away.
playing as guest —
sign in to save this run & your time