Read the result. Follow the evidence.

Every assessment has an outcome. Confirmed findings and the agent’s own summary are shown separately so you can see what was actually demonstrated.

Assessment outcomes

Outcome	What it means
Flag captured	The exact private flag was retrieved or submitted correctly.
Finding confirmed	A supported exposure has deterministic response evidence.
Completed	The run ended without a capture. Review the evidence; this is not a security certification.
Failed	The run could not finish. Read the error and retry after fixing the cause. Failed runs do not consume your allowance.
Canceled	You stopped the assessment. Evidence already gathered remains available.

Inspect the assessment

Open an assessment from your workspace. Review the status, requests used, findings, recommended actions, and request evidence. Each confirmed finding includes its affected URL and proof. The agent summary can suggest further investigation; it is not a confirmed finding by itself.

Receive signed results

Add a public HTTPS endpoint in Webhooks and save its signing secret when it is shown. Select that endpoint when launching a run. Completion, failure, cancellation, capture, and confirmed-finding events can all be delivered.

{
  "id": "evt_example",
  "type": "run.flag_captured",
  "created_at": "2026-11-02T12:00:00.000Z",
  "data": {
    "run_id": "run_example",
    "target_id": "tgt_example",
    "status": "flag_captured"
  }
}

This example shows the event envelope. Additional evidence fields depend on the result. Validate the HMAC over the exact raw body using the signature verification example, deduplicate by event ID, and return HTTP 2xx.

Retry a delivery

Webhooks shows the delivery status, HTTP response, and attempt count. Automatic retries run up to eight times. Fix your endpoint before choosing Redeliver; your receiver should safely accept the same event more than once.