Observed arrival · 2026-10-18
Dokaz tests whether one user can read another’s web-app data
A downloadable macOS and Windows tool that runs a web app locally, creates two users, and probes whether one can access the other’s data.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Developers testing web-app access control
- Worth noticing
- A pass requires a positive-control exploit and real probes; the sample reports 11 requests on the vulnerable build and 18 on the repaired one.
Field notes
For its notes-app example, the page displays 11 requests and one violation on a vulnerable build, then 18 probes and zero violations on the repaired build; it says a positive control is required before a pass counts. The page also says users provide their own model key or use a local model, while Dokaz still needs an internet connection for sign-in and subscription checks before each audit.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue