Passwords in plain text. A scoring engine that stopped after one round.Passwords in plain text. A scoring engine that stopped after one round.

Problem

The challenge

The Replit prototype had a single-round scoring engine. Multi-round play, cumulative scoring, and live display were missing. Worse: passwords were stored in plain text. Real users were on the platform with this vulnerability. No venue licensing, no billing, no operator dashboard.

Outcome

What we built

Security was cleared first — every stored credential migrated to a properly hashed system and access controls rebuilt. Then the scoring engine: multi-round play, cumulative scoring, real-time leaderboards, concurrent games across lanes, and a dedicated TV display view. Then venue licensing, subscription billing, and a full operator dashboard.

• →Full security remediation (hashed credentials)
• →Multi-round scoring engine rebuilt
• →Real-time leaderboard + TV display output
• →Venue licensing + integrated billing
• →Full operator dashboard