Platform changelog

Submission retesting is here!

Now, companies can request retests for accepted submissions to ensure vulnerabilities have been resolved. Simply specify a bounty and deadline for the retest. The researcher will confirm if the issue is still present.

For more information, visit our latest changelog

Companies

Jira integration deactivation notification

Customers will now receive email notifications if their Jira integration is deactivated, helping companies to quickly respond to unexpected issues.

View submission severity history

Company users can now view the entire history of submission severities, including previous severity vectors.

Improvements to the submissions overview.

We heard your feedback. The archived submission toggle is now accessible, directly visible in the submission overview, improving ease of use.

Researchers

Update to Hybrid Pentest notification

Researchers who have applied to Hybrid Programs will now be notified if the test window or expected effort changes. This ensures researchers can adjust their applications if the new schedule no longer fits their availability.

Cooldown period for Hybrid Pentest

When the test window in Hybrid Pentests is modified, a cooldown period has been added before companies can pick researchers. This gives researchers time to confirm their availability for the updated window.

Companies

PDF and CSV Export

Exporting submissions as PDF or CSV is now available through the latest version of the Company External API, providing more flexibility and accessibility in handling submission data.

Researcher Platform Statistics

We've refined the researcher overview to allow toggling between program-specific stats and overall platform stats, addressing previous confusion and enhancing clarity.

Hybrid Program Export Improvements

Numerous improvements have been made to the Letter of Attestation and Pentest Report exports for Hybrid programs, ensuring more accurate and comprehensive documentation.

Researchers

Active Researchers

Researchers can now mark themselves as active on any non-VDP bug bounty program. On a program detail page, researchers will have the option to indicate through a toggle in the ‘Program actions’ card that they are 'active on this program and open to collaborate'

Messaging & User Mentioning

Enhanced messaging features and the ability to mention users directly in messages, improving communication and collaboration.

Learn more

VDP Guiding Principles

 Introducing guiding principles for Vulnerability Disclosure Programs (VDP) aimed at enhancing clarity and motivation for researchers.

Report Illegal Content on Our Platform

Users who encounter illegal content on the Intigriti platform can now report it directly through the platform. This feature aligns with our commitment to comply with the EU Digital Services Act (DSA) (Regulation (EU) 2022/2065).

Learn more

Technical Upgrades

Primarily focuses on technical upgrades and implementing larger functionalities, which necessitate multiple rounds of development work. However, stay tuned as we have exciting things in the pipeline.

Researcher Self-Billing

Introduction of self-billing for researchers, enhancing their autonomy and efficiency in managing billing processes.

Learn more

Read-only roles for company members

Introducing new read-only user roles, “Program reader” and “Group reader,” to improve companies experience and productivity by providing more control over user access levels. These roles allow company members to view important submission data without editing permissions, ideal for developers, executives, and compliance officers who need to observe but not alter information.

Learn more

Brinqa Integration for companies

We’re happy to announce Intigriti’s latest partnership with Brinqa, a leader in vulnerability management. This integration marks a significant step forward for companies in managing and prioritizing enterprise-level vulnerabilities. 

Learn more

Improved API for Researchers

Every researcher can now choose to only retrieve the activities on the programs they are following.

Learn more

Security, Reliability and Performance updates

Learn more in our trust center