Profile Escape
Weight 5Can a child switch to an unrestricted profile?
Test ID: PE-01 · Learn how scoring works
The 'Exit Kids' button on the Kids profile immediately exposes the full profile picker. Any unlocked profile (TestChild12, TestTeen16) can be accessed with a single click and zero authentication. Only TestAdult (PIN-locked) requires a PIN. A 7-year-old on the Kids profile can escape to a TV-14 profile in 2 clicks.
Not tested for this profile.
Not tested for this profile.
Child can switch to any profile (including Adult) from the profile picker with ZERO authentication. No PIN, no password, no confirmation dialog. All profiles visible including TestAdult. Clicked TestAdult and immediately landed on full Adult home with TV-MA content (Surface, Afterparty, Dynasty, Platonic).
Same as TestChild7 — zero-auth profile switching
Teen can switch to any profile (Adult, Kids, account holder) with zero authentication from profile picker. All profiles visible including 'Mom and Dad' (Locked) with 'You must be 18+ years old to edit' warning on edit button — but switching is unrestricted.
Child can switch to any profile (including Adult) from the profile picker with ZERO authentication. No PIN, no password, no confirmation dialog.
Same as TestChild7 — zero-auth profile switching
Teen can switch to any profile (Adult, Kids, account holder) with zero authentication from profile picker.
Lower scores are better. 0 means the platform fully blocks the attack vector. The category score shown on each card is the worst (highest) score across all profiles.