Intigriti’s blog

After putting in-person live hacking events on hold due to social distancing regulations and travel restrictions, Yahoo made a ground-breaking comeback this month with their 1337UP0822 event. The global media and tech company combined forces with Intigriti to host their first in-person live hacking

Edit or remove messages on submissions within 15 min of posting Updates around contextual CVSS scoring tool CVSS selection as default on severity assessment Integrated tooltips and links to first.org CVSS vector included in the submission exports Copy/past functionality on CVSS vector New Customer s

CM.com’s story began in 1999 with the sending of SMS messages to update nightclub and festival visitors. Today, it is a global leader in cloud software for conversational commerce. Sándor Incze is CISO at CM.com—a job that involves ensuring the cybersecurity for all of CM.com’s platform offerings. H

Tip! Watch my webinar for how to run an internal bug bounty program. Internal bug bounty programs only invite employees of the company to participate. Although, sometimes, companies will leverage their internal teams and external security researchers to maximize the skills base doing the testing. As

Visma is a leading provider of cloud software solutions in Europe and Latin America. With around one million public and private sector customers for their software solutions across the Nordics, Benelux, Central and Eastern Europe, and Latin America, the organization works continuously to maintain a

Yahoo’s second live hacking event with Intigriti is just around the corner. Without giving too much away, this exciting event will bring together a select group of Intigriti’s security researchers to work on a specific scope set out by the team at Yahoo. To get a feel for what’s to come, Intigriti s

Bug bounty programs are an excellent way for organizations to find and resolve cybersecurity vulnerabilities. However, to maximize success, it’s important to include this essential pre-step: the need to prepare internal teams when launching a bug bounty program launch. To help guide you through the

“Continuous security testing” has recently achieved a top ten spot in the cybersecurity lexicon. At first glance, it appears self-explanatory and very sensible—something like, “An apple a day keeps the doctor away”, right? Well, yes. But what exactly is continuous security testing? How is it differe

Organizations run bug bounty programs as a way to identify and fix vulnerabilities within their systems, assets, and applications. They work by giving ethical hackers permission to test for vulnerabilities and provide a report of what they discover in an effort to reduce their attack surface. Altern

Dark theme is a popular request for every application, website, or operating system (OS) nowadays. There are many reasons for that; some are merely preferences in style, and others are accessibility and health concerns (I think most of us have gotten a headache from staring at overly bright screens

Anyone assessing the best bug bounty platforms will likely encounter many long lists of platform features. These can be overwhelming and leave you uncertain about how to make the right choice for your company’s cybersecurity needs. So, how do you make an informed choice from the diversity of platfor

In this release, we focused on improving your reporting experience. A quick typo or a cluttered code block is a thing of the past with code syntax highlighting and a native spell check everywhere! New changes to your reporting experience in a nutshell: Native browser spell check in Markdown Code syn

In January 2022, a new EU law came into effect, enforcing a two-year warranty period on digital goods (such as games and software). Directive (EU) 2019/771, EU Member States is now fully in effect and is challenging digital goods producers to improve and maintain quality and security in the interest

Building a strong ecosystem is key to optimizing the collective benefit for both Intigriti clients and researchers. By creating more value for one entity, it provides opportunities and brings stability to the other. At Intigriti, for example, we support the community to become better hackers, and in

There was big news for the crowdsourced ethical hacking community on May 19th this year. The U.S. Department of Justice revised its policy in respect to “ethical” or “good-faith” hackers. It will no longer prosecute them under the Computer Fraud and Abuse Act (CFAA). This is a welcome step forward i

Intigriti, Europe’s leading bug bounty and vulnerability disclosure platform, is pleased to announce that it has attained ISO 27001 certification–the rigorous international standard that specifies best practices for information security management systems (ISMS). ISO 27001 certification guarantees t

Live Hacking Events (LHEs) are something special for everyone involved. Unlike regular, continuous bug bounty programs, LHEs really focus the attention of a select group of outstanding researchers on a very limited scope with equally limited time. And while we have had some very successful remote LH

The unique occupation of bug bounty hunting offers a heightened level of freedom and lifestyle that traditional jobs cannot provide, but which today’s security professionals’ desire. Intigriti set out to explore this trend further. Intigriti’s second annual Ethical Hacker Insights Report reveals bug

If you’ve been following along with this series on the bug bounty process, you should have a good idea of setting up a bug bounty program by now and what to expect when launching. In this last article in the series, we will explore how to optimize bug bounty programs for success. Given the ever-incr

Bug Bounty, Continuous security testing… All relatively new terms and definitely the new way of improving security maturity. But how do you get started? The available information found online is often unstructured, inconsistent and the amount can be overwhelming. Therefore we decided to start from t