Security Preflight Challenge.

Organizer

The FixVibe Security Preflight Challenge is organized by FixVibe.

Challenge period

Each challenge runs for a published period. Winners will be announced shortly after the challenge period ends. New challenges open each month.

Eligibility

The challenge is open to participants aged 18 or older who own, operate, or are authorized to test the submitted site, app, or domain.

How to enter

Visit fixvibe.app/security-preflight-challenge, run a free FixVibe scan on a site, app, or domain you own or are authorized to test, then submit your Scan ID and required entry details through the challenge entry form.

No purchase required

The challenge is 100% free to enter. No payment is required. No signup is required to run a scan or submit an entry. A FixVibe account may be required only to claim or activate a Pro subscription prize.

Prizes

Three winners will each receive a 1-year FixVibe Pro subscription with an approximate retail value of $216.

Prize categories

• Highest verified score: awarded to the eligible real project with the highest first qualifying score during the challenge period.
• Lowest verified score from a real project: awarded to the eligible real project with the lowest first qualifying score during the challenge period, excluding intentionally vulnerable, throwaway, test, demo, or challenge-created projects.
• Best security lesson learned: awarded to the eligible participant who submits the clearest and most useful lesson from their scan without disclosing sensitive findings.

Domain eligibility

Only one eligible entry per community participant and per root domain. example.com, www.example.com, and app.example.com count as the same root domain unless FixVibe determines they are clearly separate products. If multiple participants submit the same root domain, the earliest verified eligible Scan ID is used.

First qualifying scan

Only the first verified qualifying scan for a root domain during the challenge period is eligible for the highest-score and lowest-score prize categories.

Authorization

Participants may only scan sites, apps, and domains they own, operate, or are authorized to test. Do not scan other people's products or third-party domains without permission.

Sensitive information

Participants should post only their overall score and rating publicly. Do not post sensitive findings, exposed secrets, admin paths, tokens, private URLs, exploit details, or detailed vulnerability output.

Excluded entries

• Throwaway domains
• Test-only projects
• Intentionally vulnerable apps
• Honeypots
• Demo projects created only for this challenge
• Domains belonging to large third parties unless authorization is verified
• Entries that appear abusive, misleading, automated, or fraudulent

Winner verification

Winners may be asked to verify domain control by DNS TXT record, email from the domain, a hosted verification file, or another reasonable verification method. Failure to verify domain control may result in disqualification.

Public sharing

Sharing your score publicly on Reddit, Product Hunt, or another community is optional. Public sharing is not required to win unless explicitly stated for a specific community-only challenge. Product Hunt upvotes, Reddit upvotes, likes, reposts, or follower counts are not used to determine winners.

Featuring participants

Selected participants may be invited to appear on the FixVibe homepage, challenge page, or recap post. FixVibe will only feature a participant's project name, score, quote, username, or domain if the participant gives explicit permission.

Winner announcement

Winner cards may show "?" until winners are verified and announced. Winners may choose whether their username, project name, domain, stack, score, or quote is displayed publicly.

Platform disclaimers

This promotion is not sponsored, endorsed, administered by, or associated with Reddit, Product Hunt, or any other third-party platform. By participating, entrants release Reddit and Product Hunt from liability related to the promotion.

Void where prohibited

The challenge is void where prohibited by law.

Changes and disqualification

FixVibe reserves the right to disqualify entries that violate these rules or undermine the fairness, safety, or integrity of the challenge. FixVibe may update challenge rules for future monthly challenge periods.