Case Study — CX Audit Report System
A gap between what an interface implies and what a system actually enforces, caught and fixed.
While building the CX Audit Report System, I designed a paid-unlock flow where a client's full findings stay hidden until payment. This is the mechanism that gates it.
What a visitor saw
Key Observations
Sample finding text sits here describing a customer experience gap, written out in full sentences that read like real findings.
What was in the page's code
To a visitor, this section was locked. In the page's own code, it wasn't. The full findings sat there in plain, readable text, one right-click away.
The locked sections were hidden with a CSS blur, visually gated but not actually removed from the page. Anyone who right-clicked and chose "View Source," or simply copied the page, could read the full findings in plain text, no payment required. The blur worked on the eye. It did nothing to the data. I traced the bug to that gap, not "the page looks unlocked," but "the thing meant to make it inaccessible never touched accessibility at all." The fix was to stop treating visibility and access as the same control: pull the real content out of the public file entirely, and only release it from a separate, private source after payment confirms.
What a visitor sees
Key Observations
Sample finding text sits here describing a customer experience gap, written out in full sentences that read like real findings.
What's in the page's code now
Same screen. Different reality underneath. The real findings no longer exist in the page at all until payment is confirmed.
This wasn't a cosmetic fix. It closed a gap between what the interface implied and what the system actually enforced, the same gap I get paid to find in other people's products.
The findings are gated to the business that paid for the audit, not the public, not a competitor, not anyone who happens to have the link. Copy the "locked" section now and paste it anywhere, and all that comes with it is a note that it's redacted until unlocked. Nothing else.
See the live audit demo →