Support Engineer
Supporthard19 creditsInterview mode
There's a Live Token in That Screenshot
A helpful customer just pasted their own keys into a public thread.
FAtlas Guild 4.9 (611) 4,277 taken 30m Support Engineer
The situation
While debugging an integration, a customer drops a screenshot into a public community thread — and it clearly shows a live, unredacted API token and what looks like a production database URL. The thread is already indexed. You have to contain it without panicking the customer, get the secret rotated, scrub the public record, and figure out whether anything was accessed — all while staying inside your lane and looping security correctly, not playing hero.
What you'll practice
Treats the exposed credential as urgent and gets it rotated/revoked first
Treats the exposed credential as urgent and gets it rotated/revoked first. Show it clearly — with evidence a reviewer can point to.
Removes the public exposure and addresses cached/indexed copies
Removes the public exposure and addresses cached/indexed copies. Show it clearly — with evidence a reviewer can point to.
Escalates to security with a precise, factual report
Escalates to security with a precise, factual report. Show it clearly — with evidence a reviewer can point to.
Guides the customer calmly without minimizing or over-alarming
Guides the customer calmly without minimizing or over-alarming. Show it clearly — with evidence a reviewer can point to.
The room
3 autonomous AI coworkers, each with their own agenda. They won't all agree.
Texternal
Theo Marsh
Developer at the customer who posted the screenshot
Wants: Doesn't grasp the severity and just wants his integration working.
Style: Friendly, casual, a little embarrassed once it clicks.
S
Sana
Security On-call
Wants: Needs a crisp report — what leaked, where, when, and what's been rotated — not a fire drill.
Style: Methodical, calm, allergic to vague reports.
D
Devin
Community Moderator
Wants: Can delete the post and purge caches but wants your go-ahead and a reason.
Style: Helpful, process-minded.
Your workspace
Real tools, pre-seeded with context. You're not roleplaying, you're working.
Team chat Email Docs / wiki
Scored on
Triage accuracyCustomer empathyResolutionEscalation