Hidden Overlay Detection for Interviews (Capture-Excluded Windows)

Q: What is a hidden interview overlay?

It is a window drawn on top of the candidate's screen that is configured to be excluded from screen capture, so answers or hints stay visible to the candidate but never appear in screen share or a recording.

Q: How does InterviewWatch find overlays that screen share cannot see?

It checks window attributes at the operating-system level, including the WDA_EXCLUDEFROMCAPTURE display-affinity flag, and cross-references windows and processes against an updateable catalog of known overlay tools, instead of relying on what the capture API returns.

Why it matters

Screen share is not the same as screen truth.

Overlay tools use the same display-affinity APIs that legitimate apps use to protect DRM content. Point it at an interview and the candidate reads generated answers the interviewer will never see in the shared feed.

What the interviewer sees

A normal code editor, browser, or video call. Nothing unusual.

What is really on the candidate screen

An overlay with generated answers, hints, or talking points.

Screen-share recording

Omits protected or capture-excluded windows by design.

InterviewWatch signal

Flags windows configured to be excluded from capture, or tied to known overlay tooling.

How it works

Read the window flags, not the pixels.

On the fast 2-second loop, the overlay detector inspects the display-affinity of on-screen windows. A window marked to be excluded from capture is exactly what an interview overlay needs, and exactly what InterviewWatch reports.

The capture API hides the overlay from screen share on purpose. The agent reads the window's display-affinity flag directly, so it can't.

Capture exclusion

Detects windows configured to avoid screen capture, a defining trait of overlay-based assistance tools.

Known overlay processes

Cross-references windows and processes against a remotely updateable catalog of interview overlay tools.

Contextual severity

An overlay active during a live answer is treated as critical; a harmless background app is scored differently.

FAQ

Overlay detection questions, answered.

What is a hidden interview overlay?

A window drawn on top of the candidate's screen and configured to be excluded from capture, so answers or hints stay visible to the candidate but never appear in screen share or a recording.

How does InterviewWatch find overlays screen share cannot see?

It checks window attributes at the OS level, including the WDA_EXCLUDEFROMCAPTURE display-affinity flag, and cross-references windows and processes against an updateable catalog of known overlay tools, instead of trusting what the capture API returns.

Is an overlay always cheating?

Not necessarily, which is why severity is contextual. A capture-excluded window active during a live answer is a critical signal; a harmless background app is scored differently. Humans review the finding with its timing.

See the windows screen share is built to hide.

Add capture-exclusion detection to your live interviews and close the biggest blind spot in remote hiring.

Try now See AI tool detection

Detect Answer Overlays That Stay Invisible To Screen Share.