Designing Secure Role-Based Platforms Beyond the Login Screen
Practical principles for authorization, Row-Level Security, server-authoritative operations, payments, and auditability in multi-sided products.
Read the insight →AUZ Live Product · Custom Software
CertGuru is a professional exam-preparation platform created under AUZtec Innovations’ multidisciplinary product-delivery model. It brings exam-specific simulation, a broad certification catalogue, secure learner accounts, progress intelligence, subscription enforcement, and cloud operations into one cohesive digital product.
AuztecCertGuru
Custom Software
Certification candidates need more than question lists. They need practice under realistic timing, navigation constraints, and format variety, while retaining a clear view of progress across attempts. The opportunity was to unify those needs across many professional certification bodies without turning the experience into a generic multiple-choice quiz.
We designed CertGuru as a modular Vite React application on Cloudflare Pages, backed by Supabase for authentication, PostgreSQL, Row-Level Security, and server-authoritative scoring. Candidates can search and compare certification paths, review exam-specific rules, complete timed attempts across multiple question formats, and return to dashboards that surface attempt history, score trends, streaks, and weak domains — all with answer keys kept out of the public client.
The engineering and design work behind the product.
Timed full attempts with exam-specific counts, durations, flagging, review grids, section gates, and CAT-style behaviour where configured.
A searchable catalogue across six professional categories, each with an exam-specific introduction and rules.
Multiple-select, matching, hotspot, image hotspot, fill text/numeric, case, practical, and task-simulation — not just radio buttons.
Attempt history, best/latest/average scoring, animated score trends, streaks, and weak-domain reporting.
MFA/AAL2-gated admin console, subscription enforcement at exam start, complimentary-access keys, and audited privileged actions.
Attempt creation, answer submission, and grading run server-side; answer keys are never exposed to the browser.
50 live certification engines across six professional categories
13,613 active question records spanning 12 stored format families
Four commercial package models with subscription enforcement
Server-authoritative scoring with answer keys kept out of the client
MFA-protected administration with audited privileged actions
Automated Git-to-Cloudflare production delivery
Accuracy note — CertGuru is live in production while commercial checkout activation and ongoing certification-fidelity review continue as managed rollout workstreams. Certification names and trademarks belong to their respective owners; CertGuru and AUZtec Innovations are not affiliated with or endorsed by the listed certification bodies unless expressly stated.
See how the principles behind this project apply to other business problems.
Practical principles for authorization, Row-Level Security, server-authoritative operations, payments, and auditability in multi-sided products.
Read the insight →Tell us what you're building. We'll help you turn it into a scalable digital product.