Not sure how much to reward for a vulnerability? We analyzed 640+ bug bounty programs to guide your decision.

Reward your researchers fairly – try our bug bounty calculator today!

Platform changelog

Curious about the latest and greatest on Intigriti? You're in the perfect place! Dive in to see what's new, what's improved, and what's changed

Releases

22/04/2026 15/04/2026 08/04/2026 25/03/2026 18/03/2026 25/02/2026 28/01/2026 21/01/2026 14/01/2026 17/12/2025

Subscribe to our RRS feed to stay up-to-date with our latest releases.

Changes

For companies

📊 New in Insights: Triage metrics

22/04/2026

What we did: We’ve added Triage insights to the Insights Review section with charts for triage review status, triage-to-final decision alignment, and time to first triage assignment.

Why we did it: To give clearer visibility into triage coverage, decision consistency, and triage responsiveness.

Who it helps: This helps program and security teams who want to monitor triage performance and ensure consistent decision-making across the submission review process.

Learn more in this article.

Changes

For companies

📊Insights: Time grouping

15/04/2026

What we did: You can now change how Insights charts group data over time. In addition to month (default), you can group results by week, quarter, or year.

Why we did it: Different questions need different “zoom levels.” Time grouping helps you:

Spot trends faster (e.g., “Are we improving week over week?”)
Report in the format stakeholders expect (quarterly/annual summaries)
Avoid exporting data just to re-aggregate it elsewhere

Who it helps: Security teams and company admins using Insights to track performance and communicate results.

💡Learn more in this article.

Changes

For companies

Enhanced program asset sorting

08/04/2026

Why we did it: Manually rearranging assets becomes inefficient when managing large asset inventories. Automatic sorting options reduce setup and maintenance effort, making it easier to organize and review assets without having to drag and drop each item individually.

What we did: Introduced predefined sorting options for assets within a program’s scope. Assets can now be automatically sorted using built-in sorting methods, while still allowing manual reordering through a dedicated Custom Sorting mode triggered by drag-and-drop.

Who it helps: This helps program managers and security teams managing large or complex scopes, enabling them to quickly organize assets and maintain a clear, structured program scope.

💡 Learn more in this article.

Changes

For companies

Reassign submissions faster when needed

08/04/2026

What we did: Triage and program members can now unassign themselves (or be unassigned) from a submission.

Why we did it: Review workloads can change quickly, and sometimes a submission needs to move to a different person or back to the queue. This update makes reassignment straightforward, so teams can keep work moving without getting stuck on ownership.

Who it helps: This helps triage and security teams keep the queue clean, balance workloads more easily, and handle high submission volume with less manual coordination.

Changes

For companies

For researchers

Copy code blocks from the markdown editor

25/03/2026

What we did: We added a one-click way to copy code blocks from the markdown editor.

Why we did it: More reports now include command snippets, such ascurl, often generated or assisted by AI. Copying these commands straight from the report makes it faster to validate and reproduce findings.

Who it helps: Security analysts who need to quickly test commands included in submissions.

Changes

For companies

For researchers

Syntax highlighting is back

25/03/2026

What we did: Syntax highlighting is back for code blocks.

Why we did it: We previously removed syntax highlighting to address a security issue that could cause resource exhaustion. We have now re-enabled it with protections in place so code snippets are easier to read without putting platform stability at risk.

Who it helps: Researchers writing reports with code snippets, and security analysts reviewing and validating technical details.

New feature

For companies

📊Insights: Explore community and company insights

25/03/2026

What we did: Added two new dashboards to the Beta Insights experience. The Company dashboard gives you a centralized view of your programs and team, including program distribution by type and status, program accessibility settings, and a breakdown of team membership and activity. The Community dashboard gives you visibility into researcher engagement, including submitter trends over time, top contributors by submissions and rewards, geographic distribution of your community, and invitation tracking.

Why we did it: Insights were released last week, and this expands what company admins can see so they can make better decisions about program setup, team access, and researcher engagement.

Who it helps: Company Admins who want a centralized view of their program landscape, team membership, and researcher community to make informed decisions about program management, user engagement, and outreach strategy.

💡Learn more in this article

Changes

For companies

AI submission summary via Company API

18/03/2026

What we did: Added the AI summary field to the submissions overview response in the External Company API.

Why we did it: Including AI-generated summaries in the submissions overview allows integrations and reporting tools to quickly understand the essence of each submission without needing to retrieve and process the full report.

Who it helps: This benefits teams using API integrations for dashboards, automation, centralized reporting, or SDLC tooling. It helps security and development teams quickly understand findings that need remediation when syncing submissions into issue trackers or development workflows.

Changes

For companies

Bulk edit program assets

18/03/2026

What we did: Added bulk edit capabilities for assets within a program’s scope. Multiple assets can now be updated at once including moving them to the top or bottom of the list, moving them in or out of groups, updating their tier, or removing them from the program.

Why we did it: Managing assets one by one can become time-consuming in programs with large or complex scopes. Bulk editing reduces manual effort and makes it easier to quickly organize, prioritize, and maintain scope.

Who it helps: This helps program managers who manage large asset inventories and need to efficiently structure and maintain their program scope.

💡Learn more in this article

New feature

For companies

Insights [Beta]

18/03/2026

What we did: Launched Insights, the first set of essential dashboards designed to give company admins clear visibility into key data areas. These dashboards provide centralized insights across Assets, Budget, Submissions, Rewards, and Review & Remediation.

Why we did it: Previously, the dashboard experience offered limited filtering, restricted time selection, and incomplete data coverage. As a result, many teams relied on manual exports or Customer Success to generate reports. Insights addresses these gaps by providing more direct access to key data.

Who it helps: This helps company admins in need of clear, centralized insights to better understand their programs, make informed decisions, and report outcomes to upper management. By surfacing key metrics in one place, Insights also makes it easier to demonstrate program ROI and reduces the need for manual querying.

💡Learn more in this article

Changes

For researchers

UPI Money Transfer

25/02/2026

What we did: We’ve added UPI Money Transfer as a new payout method for researchers in India.

Why we did it: As payouts to Indian researchers continue to grow year over year, we wanted to reduce friction by supporting a widely used local transfer method that makes receiving rewards easier and faster.

Who it helps: Researchers with India set as their country of residence will now see UPI Money Transfer as an option in their payment method list.

💡Learn about all our payment methods in this article.

New feature

For companies

Advanced Submission Search

25/02/2026

What we did: We’ve added the option to search within encrypted submission report fields, including Proof of Concept, Impact, and Recommended Solution.

Why we did it: Previously, search was limited to metadata, making it difficult to identify duplicate or related submissions based on report content. This enhancement enables more comprehensive and content-driven search.

Who it helps: This benefits triage teams and security teams who need to efficiently locate similar or duplicate submissions and improve review accuracy.

New feature

For companies

Track custom submission field changes through the API

28/01/2026

What we did: This enhancement enables tracking changes to custom submission fields via the API, making those updates programmatically accessible in real time.

Why we did it: By exposing these updates programmatically, it improves data transparency and supports more accurate reporting, performance measurement, and stronger auditability across integrated systems.

Who it helps: Designed for organizations that rely on API integrations for centralized reporting, governance, or compliance and require reliable, structured change tracking.

Changes

For companies

For researchers

Preview images without downloading

28/01/2026

What we did: Companies can now preview images with secure file extensions (.jpg, .png, .gif) directly in the platform, even when inline image markup isn't used in the content.

Why we did it: To make reports faster and easier to review by eliminating the need to download image attachments before viewing them.

Who it helps: Companies triaging and reviewing vulnerability reports.

Note: Videos and attachments with insecure file extensions still need to be downloaded to be viewed.

New feature

For companies

Group program asset into logical clusters

21/01/2026

What we did: This feature allows you to organize program assets into logical groups, making large and complex scopes easier to navigate and understand.

Why we did it: Large, granular scopes are essential for accurate reporting and skill-based researcher matching, but without structure program scopes quickly become overwhelming. Asset Groups bring clarity by encouraging cleaner scope instead of hiding critical details in free-text fields. This improves search, filtering, recommendations, and reporting across the platform.

Who it helps: This feature helps companies with larger or more complex program scopes better structure and manage their assets. It makes it easier for researchers to browse and find relevant targets, ultimately improving engagement and the quality of submissions you receive.

💡Learn how to make the most out of Asset Groups in this article.

New feature

For companies

Easily see suspended programs on your dashboard

14/01/2026

What we did: Company users can now view a dedicated list of their suspended programs directly on their dashboard. You can filter by suspension type (Automatic or Manual) and sort by the date the program was suspended.

Why we did it: Previously, there was no way to filter and view only suspended programs, which made it difficult to identify when action was needed, such as review budgets, reopen and update programs, etc. This new view brings clarity and ensures you're always aware of programs that require attention.

Who it helps: This helps company users keep track of suspended programs and take immediate action when needed, reducing downtime and ensuring smoother program management.

💡Learn more about suspend programs and best practices here

New feature

For researchers

Reputation Points Linking on Hacker Profiles

17/12/2025

What we did

We introduced a new profile enhancement that brings together an ethical hacker’s reputation points from across the wider crowdsourced security ecosystem. These points now sit alongside their Intigriti achievements, giving hackers the option to display a fulller view of their reputation and experience.

Why we did it

Ethical hackers contribute to multiple security projects, building reputation and trust through countless hours of real-world vulnerability research. Yet this broader reputation is often fragmented across many platforms.

We created this feature to showcase the *full* journey of every hacker, not only the reputation they’ve built on Intigriti, but the recognition they’ve earned elsewhere. In doing so, we’ve ensured that hackers who have built their reputation on our platform are not disadvantaged, their Intigriti achievements remain clearly represented and continue to stand on their own merit with the profile.

This update reflects our commitment to transparency, fairness, and amplifying the true value hackers bring. Just as importantly, hackers retain full control over what reputation points they choose to display.

How it helps

A complete professional profile: Hackers can showcase a holistic, CV-style summary of their reputation, mirroring how professionals present experience on their portfolio.
Community transparency: Customers gain a broader, more accurate view of a hacker’s expertise and credibility.
Hacker-first control: All reputation point sharing is optional, hackers decide what appears on their profile.
Stronger trust signals: A unified reputation profile increases recognition, confidence, and trust across the community.

What we did

Why we did it

How it helps

A complete professional profile: Hackers can showcase a holistic, CV-style summary of their reputation, mirroring how professionals present experience on their portfolio.
Community transparency: Customers gain a broader, more accurate view of a hacker’s expertise and credibility.
Hacker-first control: All reputation point sharing is optional, hackers decide what appears on their profile.
Stronger trust signals: A unified reputation profile increases recognition, confidence, and trust across the community.

Product types

Bug bounty

PTaaS

Managed VDP

Live hacking events

Platform

Platform tour

Integrations

Trust center

For customers

Additional demos

Knowledge base

Uptime and status

Changelog

Industries we serve

Retail

Gaming and eSports

Finance and Insurance

Leisure and Hospitality

B2B SaaS

Telecommunications

Government and Public services

Transport & Logistics

Healthcare

News, media, published content

eCommerce and transactional websites

IoT and B2B ecosystems

Resources

Customer stories

Blog

Information sheets

Ebooks

Webinars

Shorts

Events

Bug bounty talks

Plans to suit your security testing needs

Core

Premium

Enterprise

Learn more about our company

About us

Leadership

Careers

Contact us

About Intigriti

How it works

Public programs

Intigriti Ambassador

Useful links

Leaderboard

Learn to hack

Swag shop

Newsletter

Bug bounty talks

Blog

Events

Blog

Five key takeaways from the UK’s new Cyber Security & Resilience Bill

BugQuest 2026: 31 Days of Broken Access Control

Intigriti 0326 CTF Challenge: Chaining DOM clobbering and CSP bypasses for XSS

Platform changelog

Releases

📊 New in Insights: Triage metrics

📊Insights: Time grouping

Enhanced program asset sorting

Reassign submissions faster when needed

Copy code blocks from the markdown editor

Syntax highlighting is back

📊Insights: Explore community and company insights

AI submission summary via Company API

Bulk edit program assets

Insights [Beta]

UPI Money Transfer

Advanced Submission Search

Track custom submission field changes through the API

Preview images without downloading

Group program asset into logical clusters

Easily see suspended programs on your dashboard

Reputation Points Linking on Hacker Profiles