Table of Contents
◾️ Prerequisites
※ Suspicious behavior logs capture what happened during an exam but do not, on their own, prove misconduct
If you notice questionable activity, we recommend confirming directly with the applicant in an interview. Throughout this page, each log item is paired with possible interpretations to help you decide whether further investigation is necessary.
◾️ Types of Suspicious Behavior
The following detection results appear in the Applicant List and on each Exam Results page. Review what each item attempts to detect, its relative severity, and whether it should influence your evaluation.
Operation | Details | Detection Background | Severity | Availability |
Multiple Attempts | Appears when the applicant’s IP address matches another submission, suggesting the same person took the test multiple times or collaborated with others | Flags different email addresses using the same IP or groups taking the exam in one location. An identical or very similar submission from the same IP may indicate cheating | Low | Shown on all plans (Applicant List) |
Session Data Mismatch | Displays when the applicant’s IP address or session ID changes during the exam | Network hiccups or switching browsers can also change session data, so treat this result with caution. Similar answers from the same IP may still warrant investigation | Low | Shown on all plans (Applicant List) |
Code / Text Paste | Logs when a large block of code is pasted into the editor from an external source | Detects submission of code not written in the editor. Applicants might also paste code they wrote locally, so confirm via | High | Visible only on plans with |
Exam-Tab Focus Loss | Records time spent outside the exam tab. Leaving for a total of 10+ minutes is flagged | Long tab switches may indicate searching the web or using AI tools for answers. How you treat this depends on your anti-cheat policy regarding external research and AI usage | High | Visible only on plans with |
Screenshot | Captures actions that may indicate a screenshot during the exam | Because Track Test disables text copying from questions, screenshots can be used to save problem statements. This detection works only on Windows; macOS and other OSs are not supported | High | Visible only on plans with |
※ Items marked Low are hard to judge in isolation. Items marked High may indicate misconduct even on their own
We recommend investigating whenever three or more different suspicious behaviors are detected for a single applicant.
◾️ How to Review Suspicious Behavior in Detail
For timestamps, content, and other specifics, open the Action Logs on each applicant’s Exam Results page.

