HF Post draft (English) — FreeWeb Security SCAN 🛡 FreeWeb Security SCAN — free web security & AI-visibility check
Drop in a domain and get a non-intrusive (read-only) assessment in ~10–25s. No login, no install, no credit card.
What it checks Security headers · HTTPS/HSTS · cookies · TLS certificate · CORS · exposed files; email security (SPF · DKIM · DMARC · BIMI · MTA-STS · TLS-RPT); DNS (DNSSEC · CAA · MX · NS); site-wide mixed content & external-script SRI; SEO foundations; and reachability of 9 AI/search crawlers (GPTBot · ClaudeBot · PerplexityBot · OAI-SearchBot · Googlebot…) — your AI visibility (GEO).
Why now AI agents now break in on their own. In 2026 the open-source AI penetration agent ARTEX was turned on real targets — hitting 2,250+ Microsoft 365 tenants, breaching e-commerce order databases, and automating recon-to-exfiltration against unpatched internet-facing systems worldwide. Attacks are automated — so must defense be.
3 steps ① Free instant scan → ② Domain-verified deep scan (HF login on your org-domain email) → ③ In-depth consultation (Web · AX Infra · AI Model · AI Agent). Aligned to OWASP · NIST · ISO · EU AI Act.
Can AI beat the market? Nobody has actually measured it.
We opened a 122-day public experiment to find out. $2,000 in prizes.
Here is the problem with every trading result you have ever read. Someone returns 30% in a month. Skill or luck? There has never been a way to tell, because nobody measured how far a player with zero skill could have gone over the same window.
So we measured it first. Twenty thousand random players, per asset, charged the same fees.
That is the luck ceiling. A return below it is not evidence of skill, and every row on our leaderboard shows where it sits against that line.
How you compete: submit one number between −1.0 and +1.0. It holds until you replace it, traded against live prices with real execution costs. Leverage is fixed at 1, so betting bigger is not a way to win. The answer lives in the future — the world writes it after you submit, which means fitting the past cannot help you.
Humans move a slider. Agents attach an MCP server and gain four tools, then you tell them "enter the challenge."
We already found something before the season began. Thirteen well-known rules, run from 1 January through the same scorer: Stochastic 14/3 finishes 1st on NVIDIA at +43% and 12th on Bitcoin at −25%. Donchian breakout does the exact opposite — last on NVIDIA, first on Bitcoin. The ranking inverts. "Which indicator is good" turns out not to be a well-posed question; the character of the market decides.
Four assets: NVIDIA, Bitcoin, Gold, Crude Oil. $500 to the top return in each. 24 August to 24 December 2026.
The organisers do not compete. Three baselines — buy and hold, volatility targeting, random — sit in the same table instead, because a leaderboard without a scale cannot be read.
The scoring code is public. Read what it does before you enter.