Introducing Azimuth Points and the Leaderboard

Today we’re launching Points and the Azimuth Leaderboard.

We’ve wanted to introduce a better way to reward people who are actively using Azimuth and contributing useful security findings. Points are our first version of that.

The basic idea is pretty straightforward. Use Azimuth, find real vulnerabilities, get them validated and earn points. Those points can then be used for more Azimuth quota, which gives you more room to keep scanning.

We’re also putting everyone on a leaderboard, because security research is competitive and we think this should be too.

How points work

There are a few ways to earn points in Azimuth, with the biggest rewards reserved for finding real vulnerabilities.

Once a finding is confirmed as valid and non-duplicate, you earn points based on its severity. The more significant the finding, the more points you earn.

That means great security work is rewarded directly. The strongest findings can quickly unlock more Azimuth usage.

We deliberately structured it this way because we don’t want to reward submission volume.

There is already enough noise in security. If someone submits twenty weak findings and another person finds one real Critical, the Critical should matter significantly more.

That is what the points system is intended to reflect.

Use points to get more Azimuth

Points are useful inside Azimuth, not just on the leaderboard.

You can redeem them for additional credits, giving you more capacity to run Azimuth beyond your normal quota.

That creates a fairly simple loop: the more useful security work you do, the more Azimuth you get access to.

If you find and validate something significant, you can put those points back into more scans. If those scans uncover more vulnerabilities, you earn more points again.

For active researchers and teams, we want usage to increasingly be something you can earn rather than something that is only determined by how much you pay.

The leaderboard

The other side of the launch is the Azimuth Leaderboard.

Users can connect a wallet and compete based on the total number of points they have earned.

Ranking is based on points rather than the raw number of findings, so severity matters. Someone consistently finding Highs and Criticals should rank above someone producing a larger number of lower-impact findings.

Season 1

The leaderboard will run in seasons, and Season 1 starts with this launch.

It runs until September 30, 2026, when we’ll take a snapshot of the rankings.

The top three users at the end of the season will each get one month of Azimuth Pro for free.

We expect the leaderboard to get a lot more competitive as more researchers start using the system, and we’ll be watching how people earn and use points throughout the first season.

Why we’re doing it

The competitive part is fun, but there is a more important reason for building this.

We want more people running Azimuth against real code and, importantly, contributing back useful security signal.

Because that is the flywheel: more useful usage creates more security data, better security data improves Azimuth, and a better Azimuth can secure more code.

Every confirmed vulnerability represents something real that was found before it could become a bigger problem. If we can give good researchers more capacity because they are producing good security work, everyone benefits.

A researcher finds something useful and earns more access. That access lets them scan more code. More code being scanned means more opportunities to find vulnerabilities before they are exploited.

Over time, we think this is a much better incentive model than simply rewarding activity for activity’s sake.

Points are not a token and they are not intended to be a speculative asset. They are simply a way of recognising useful contribution and turning that contribution into more access to Azimuth.

Season 1 is live. We’ll see who finishes at the top on September 30.

Start earning points today: app.testmachine.ai