Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.cveplayground.com/llms.txt

Use this file to discover all available pages before exploring further.

XP earned from labs and challenges goes two places: your private profile (visible to you on the Profile tab) and the public leaderboard (visible to everyone).

​
The leaderboard

Leaderboard in the sidebar. The page has two parts. At the top, a podium for the top three. Each has a crown, a medal, or a trophy icon, plus the handle and total XP. The podium is decorative; the data underneath is the truth. Below the podium, a table ranked by XP descending. Columns are rank, handle, XP, current streak. Your own row is highlighted wherever it sits, so you do not have to scroll looking for yourself. Clicking a handle takes you to that person’s public profile. The leaderboard is all time. There is no monthly or weekly cut. If you want a temporary leaderboard for a team or a class, that is on the roadmap; today, the platform shows the cumulative ranking.

​
Your private profile

The Profile page (in the sidebar under You) is your version of the public profile, plus a few things only you can see. The hero card has your avatar, handle, display name, and a stats strip:
  • Labs completed of total available.
  • Challenges solved.
  • Current and longest streak.
  • Total questions answered correctly.
Below the hero is the badge wall, then the heatmap, then the patch log.

​
Badges

Badges drop for milestones. Some examples:
  • First lab completed.
  • Five labs of a particular vulnerability class.
  • A streak of 7, 30, 100 days.
  • First blood on a challenge.
  • Hitting an XP threshold.
Badges are visible on both the private and public profile. The earned date shows on hover. There is no badge marketplace. You cannot trade them, you cannot stake them. They are decorative records of what you have done.

​
The heatmap

A calendar where each square is one day, coloured by how many questions you answered correctly that day. The same heatmap appears on the dashboard, but the profile shows a longer history. Empty squares are days you did nothing. The darkest squares are days you knocked out a full lab. Hover any square for the count. The heatmap runs in your time zone. If you are travelling, set the correct time zone in settings so the squares line up with the days you actually worked.

​
The patch log

A chronological list of every lab and challenge you have completed. The list shows the CVE ID, the title, when you finished it, and how much XP it awarded. The patch log is your personal record. It is also visible on the public profile, so it doubles as a portfolio. Hiring managers like the patch log because it is concrete: not “I have studied web security” but “here are the seventeen CVEs I worked through end to end, with timestamps.”

​
The public profile

/u/your-handle is the public view of your profile. No sign in needed to view it. It shows your handle, display name, avatar, joined date, badges, heatmap, stats, and patch log. What is not on the public profile:
  • Your email or any other Auth0 identity data beyond display name and avatar.
  • Wrong answer history. The profile shows what you got right, not what you got wrong.
  • Settings, notification preferences, time zone.
The URL is shareable. If you want to point a recruiter or a hiring manager at proof of work, this is the link.

​
Resetting and deleting

There is no XP reset. The patch log is meant to be permanent; if you could wipe it, it would be useless as a record. Account deletion (settings, danger zone) removes the public profile entirely. The handle frees up. Somebody else could claim it later; their profile would have nothing to do with yours.

Questions and XP

Where the XP comes from.

Settings

Display name, time zone, notifications.