The goal is to discover a way to measure security mindset as accurately as possible, and then make it high status to do well according to the measurement. There’s no reason why your contest would need to look like our current idea of a programming contest. Software companies already have incentives to measure programming ability as accurately as possible—see companies like Triplebyte which are attempting to do this in a data-driven, scientifically validated way. But no one has an incentive to make your score on Triplebyte’s quiz public and give you status based on it.
The goal is to discover a way to measure security mindset as accurately as possible, and then make it high status to do well according to the measurement. There’s no reason why your contest would need to look like our current idea of a programming contest. Software companies already have incentives to measure programming ability as accurately as possible—see companies like Triplebyte which are attempting to do this in a data-driven, scientifically validated way. But no one has an incentive to make your score on Triplebyte’s quiz public and give you status based on it.