Most people building with AI do it alone, at 2am. Here nobody argues about whether it counts as real code.
Have a look around first.
I said you could not hack this site.
Open for one week20 August to 27 August
So here are the rules, in public, before it starts. There is no server, no database, no login and no form. Nothing here takes input from you.
This counts
- Changing what this domain serves to other people, so a third party can load it and see it.
- Running code on, or reading files from, whatever is serving it.
- Getting your own deployment onto this domain.
This does not
- Anything that only happens in your own browser. A screenshot of your devtools is a screenshot.
- Taking the site offline. Down is not the same as taken over.
- Physical access to my devices.
If you clear that bar I will say so publicly and do what I said I would do. It does not matter how you got there, including talking me into it. The rules are narrow because the target is small, not so I have somewhere to hide.
Found something real? Send steps I can reproduce to security@buildersai.example. Want to check the headers rather than take my word for it: curl -sI https://buildersai.example