How your entries are graded
The organizer of sloptic-test.devpost.com uses Sloptic to grade your project if you submitted a web app. This page explains what Sloptic will do to it.
What Sloptic does
Sloptic grades a running web app from the outside, over the public internet. It does not see your source code, your repository, or your accounts. It examines your app like a visitor would and scores it on things every app must get right, including secrets kept out of what you ship, errors handled, controls that work, accessibility, and pages loading respectably fast.
You get a number, the slop score, for what your app got wrong, with a breakdown of each finding. You also get a percentile showing how it fares against others. See what the other apps looked like.
Sloptic will not judge your idea, your presentation, or whether a feature is worth building. Those stay with the human judges.
What Sloptic looks for
Sloptic examines your app against a catalog of 102 different checks. Typically an app only gets 44 of them, the passive ones, which send no attack traffic and change nothing.
This event was verified before submissions closed, so entries face the full battery, passive and active.
Active checks send real attack traffic at your app, including injection payloads and malformed input.
They also sign up throwaway accounts and create test records, since checks like broken access control need two users to compare. Expect entries in your logs and data you did not create.
What gets graded
The URL your team submitted, and nothing else. If your submission points at a third party product, a hosted notebook, a design tool, a storage bucket, it is skipped: probing it would hit that company, and your team cannot agree to that on their behalf. If the app cannot be reached or the URL does not resolve, it is skipped too and recorded as a DNF.
Exclusions
Write to hello@sloptic.org with your submission and we will exclude it. You do not need to give a reason, and it does not affect your entry in the event, which the organizer judges as they always have.
This event was verified with Sloptic on September 2, 2026.