Google Gruyere - Web security exploration
Scenario
Your interview prompt
You are exploring an intentionally vulnerable web security lab. Focus on identifying categories of security tests: authentication, authorization, unsafe input handling, stored content, request tampering, and data exposure.
Lab workspace
Google Gruyere
Intentionally vulnerable web security lab
Open the third-party practice site in a new tab, test the target flow there, then return here to organize your notes and submit your answer. We do not embed external sites.
- 1Open the external practice site
- 2Explore the target flow
- 3Write your testing notes
- 4Submit answer and compare with senior QA feedback
Focus areas
Suggested timebox: 30-45 min
Use this while exploring the external site. These notes are saved locally in your browser.
When you are ready, summarize what you would test below.
Tip: a stronger answer usually mixes happy path, negative cases, state changes, data, backend, UX, accessibility, and risk.
How to structure your answer