Intigriti’s Hybrid Pentest

Hybrid Pentesting has a reward system unique to the industry – our combination of base bounty and bounty pool. The base bounty ensures that researchers are rewarded for their participation in the project. The bounty pool provides an additional bonus if vulnerabilities are found. This way, researchers are more motivated to both sign up to projects and find as many high severity vulnerabilities as possible.

Bug bounty provides continuous testing with a free-form approach using the creative skills of ethical hackers. A Hybrid Pentest is a time-boxed pentest carried out with a specific methodology, with a proof of test provided at the end. 

Hybrid pentesting follows the pentesting as a service (PTaaS) format. As a rendition of SaaS technology, PTaaS provides pentests through a centrally hosted portal, taking care of the backend overheads and offering a more flexible and scalable solution. More details on this can be found on the Intigriti blog.

Hybrid Pentesting is also the only PTaaS product on the market that utilizes a pay-for-impact model. This means that the specific bounties attached to vulnerabilities are only paid out if they are found during the test.

Additionally, Hybrid Pentests result in fewer backend overheads than a traditional pentest. The management and organization of pentests can be a laborious exercise, particularly when it comes to the internal validation and distribution of all the vulnerabilities to the development teams.

Intigriti offers an intuitive platform to relieve customers from many of these time-consuming activities. Here, everything is housed in one place, including researcher selection, budget management, triage, report management and vulnerability tracking, risk assessment, and proof-of-concept code.