Job board — the model build-off

The one to copy if you are handling other people’s applicant data.

Best at

Almost every page locked down with no real gaps, and we proved in both directions that one employer cannot reach another's applicants. Repeated sign-in attempts are throttled, passwords are stored properly, and every change is checked for where it came from.

Watch for

Our review concentrated on security, so we did not drive the day-to-day workflows or judge the interface end to end.

Best when you want the boundary demonstrable, not merely asserted.

Best at

The only build that ships with several real employers already set up, so you can see the boundary holding in both directions rather than taking it on trust. Signing in through an outside provider cannot get you an administrator account, and access to a candidate's details stops the instant they withdraw consent.

Watch for

Two internal maintenance functions are reachable from outside and trust whatever identity the caller claims, which means an entry in the activity record could be faked. Nothing anywhere limits repeated attempts.

The broadest feature set, once the reporting path is closed.

Best at

The broadest marketplace — approval queues for new employers, moderation, paid placement and a candidate portal — with applicant separation verified against a control, and it compiles cleanly for production.

Watch for

Its “report this listing” form applied the outcome immediately, so any passing visitor with no account at all could take a paid listing off the board.Fixed since audit — reports now wait for a moderator instead of hiding the listing, demo sign-in is switched off by default, and repeated attempts are throttled — all after our audit.

Capable of the features; needs the security layer specified for it.

Best at

A genuinely working job board — real search and filtering, employer tools, admin reporting, and a sensible way of organising its data.

Watch for

It shipped with no sign-in and no permissions whatsoever: candidate contact details, a full download of the database, and administrator actions were open to anybody who found the address.Fixed since audit — password sign-in, deny-by-default permissions, per-record checks and a test to stop it regressing were added over several rounds and independently re-verified.