intigriti

Lise

Travis Anderson

Articles for company users, on program management, best practices and more.

Organisations

Getting started, introduction, Bug Bounty, RDP, VDP, responsible disclosure, vulnerability disclosure hybrid pentest

Getting started with Intigriti

Email preferences, User Account Settings, Password, 2FA, phone number, Emergency contacts, Dark theme, Batch exports, IP LookUp,

User settings

Login, password, access, can't login, registration

Accessing the Intigriti Platform

Too many requests, high server load, IP blocking

Too much traffic: IP Lookup & actions against unwanted behaviour

updates, scope changes, bonus week, program rules

Sending program updates

Responsible disclosure policy, security.txt, public program, registered program, RDP, VDP

Linking your Intigriti program on your Responsible Disclosure page

Best practices / Tips & tricks

Program confidentiality, Program status, ID-Checked, Collaboration, Extra Terms & Conditions, Leaderboard confidentiality settings

Program settings

All there is to know about setting up, running and closing a Hybrid Pentest

How Hybrid Pentest Programs work

This article lists all checks to be done before launching a program.

Program launch checklist

Bounty tiers, No bounty, Different maturity

Bounty tiers

Wizard, Domains, In scope, Out of scope, Getting started, Severity assessment, Program details

Program details page setup

Program Auto-suspension

Adding budget, PO Number, allocating company budget to program, invoicing of Bounty Budget

Adding bounty budget

Automated tooling, @intigriti.me, request header, user agent, safe harbour, automation limit,

Rules of Engagement & Testing requirements

Automatic distribution of test credentials, test credentials using 2FA

Test credentials

Program management

Limit access to submissions, working with third parties, enterprise features

Groups feature

Tags on submissions

.csv export of all submission metadata for companies

Export one or multiple submissions

Configure company emergency contacts and receive a text message when a submission with severity critical or exceptional is created.

Company emergency contacts

Accepting, rejecting, out of scope, duplicate articles, change severity, ask questions

Handling submissions

How does Intigriti Triage team handle submissions?

This article provides best practices around (seemingly) duplicate submissions or known issues

Duplicate, related or known vulnerability reports

Out of scope findings

Submission management

This feature allows you to  tailor intigriti communications to your needs and make them fit your personal operational flow.