powered by
CostusWorx
bruce@costusworx.co.za  |  +27 82 650 9098
costusworx.co.za  |  August 2026
Live in production Assessment & certification centreforge.costusworx.co.za

Certificates that have to mean something

Multi-tenant online assessment with tiered integrity — open, monitored, or a locked-down secure browser with camera enrolment. Face detection runs entirely in the candidate’s browser, so no webcam frame ever reaches a server and there are no cloud AI fees. Flagged attempts go to a reviewer with the full event timeline.

Tiered integrity 0–3Secure desktop browserClient-side face AIZero cloud AI feesVerifiable certificatesMulti-tenant
0–3integrity levelsset per exam
100%client-side AIno frame leaves the browser
0cloud AI feesdetection runs locally
3desktop platformsWindows · macOS · Linux

The problem

What CentreForge is for

Online certification is only worth what its integrity controls are worth — and enterprise proctoring is priced out of reach for most training providers. CentreForge puts a defensible, auditable integrity record behind every certificate, at a fraction of the cost, without shipping a candidate’s webcam to anyone.

Capabilities

What it does

Exam authoring
  • Question pools with single and multi-select items
  • Question and answer order randomised per attempt
  • Per-exam integrity level from 0 to 3 with graceful degradation
  • Configurable pass marks, timers and attempt policy
Question import
  • Import from CSV / Excel, Moodle GIFT or Aiken
  • Existing banks come in without rewriting them
  • Unsupported item types reported, never silently dropped
  • Mapped straight into pools
Secure desktop browser
  • Distributable Electron client for Windows, macOS and Linux
  • Kiosk fullscreen, developer tools blocked, printing disabled
  • Clipboard restricted and external navigation locked
  • Installers published through an admin downloads page
Webcam AI proctoring
  • Browser-based face detection — runs entirely client-side
  • No webcam frames sent to the server; only event types and descriptors
  • Zero cloud API fees
  • Background polling throughout the sitting
Identity & live detection
  • Face descriptor enrolled at exam start
  • Detects no face, multiple people, looking away and identity mismatch
  • Every event timestamped and confidence-scored
  • Surfaced in admin review as a single timeline
Timed assessments
  • Configurable timers with auto-submit on expiry
  • Auto-save keeps answer state through a dropped connection
  • Resume without losing progress
  • Per-attempt audit of every answer change
Review & sign-off
  • Reviewer queue with clear / flag / invalidate outcomes
  • Integrity risk band — low, medium or high — per attempt
  • Live invigilator override and approval loop
  • Audit-grade evidence-pack PDF with a tamper-evident hash
Certificates
  • Server-side PDF certificate generated on pass
  • Unique, verifiable certificate number per issue
  • Withheld on fail — no answer-key or score leak
  • Complete issue history per candidate
Multi-tenancy
  • Each training provider gets an isolated tenant
  • Row-level isolation enforced on every query
  • One provider can never see another’s exams, candidates or results
  • Per-tenant branding on the candidate experience

In practice

The proctored exam lifecycle

01BuildAdmin creates pools and publishes the exam at an integrity level
02EnrolCandidate grants camera access; reference face is enrolled
03SitLocked-down exam in the secure browser; AI monitors throughout
04ScoreAuto-scored on submit; risk band calculated from all events
05ReviewReviewer signs off; certificate issues or the attempt is invalidated
Under the hood
  • Laravel REST API with cookie-based SPA authentication, MariaDB
  • Vue 3 + Vite single-page app served same-origin — no CORS surface
  • Browser face-detection library over TensorFlow.js
  • Electron + electron-builder installers for Windows, macOS and Linux
  • Server-side PDF certificate and evidence-pack generation
Security & compliance
  • Webcam frames never leave the browser — only descriptors and event types
  • Row-level tenant isolation on every database query
  • CSRF protection on all mutating endpoints; role read from session only
  • Secure browser: kiosk mode, no developer tools, no clipboard, no print
  • Certificates withheld on fail so no answer-key data is exposed
Who it is for
  • Training providers and academies running certification programmes
  • Motor groups and fleet companies assessing compliance and skills
  • HR functions delivering onboarding and competency exams at scale
  • Any organisation needing defensible, auditable exam records
On the roadmap
Sentinel agent — virtual machine, remote-desktop and process detection
Live human proctoring dashboard and cloud gaze / audio analysis
White-label billing, self-service onboarding and LMS interop (QTI / LTI)

See it running, not in a slide

Live demo — centre admin and candidate views