Intigriti Scraper
Pricing
from $1.50 / 1,000 program directory rows
Scrapes publicly visible Intigriti data: the public bug bounty/VDP program directory, the platform researcher leaderboard, and public researcher profiles.
What public Intigriti data to scrape.
Maximum number of items to scrape. Set to 0 for unlimited (programs mode walks every page; leaderboard/researchers are capped at 100, the public leaderboard API's own server-side limit, see notes below).
Free-text keyword search against the public program directory's name/company/description fields (e.g. "bank"), via the same Algolia index the site's own search box uses. Only used in programs mode. Combine with industry/programType to narrow further.
Filter programs by industry name exactly as shown on the site (e.g. "Software", "Retail", "Financial Services and Insurance"). Only used in programs mode.
Filter by program type.
For each program, fetch its detail page's public scope data (in-scope target assets: domains, apps, etc., each with an asset type and bounty tier) and add it as a scope field. Costs 1 extra HTTP request per program (and triggers the program-scope-detail charge event once per program where detail was fetched) and adds latency, so it's off by default. Only used in programs mode.
For each program, fetch its detail page's public bounty table (payout ranges per tier, broken down by low/medium/high/critical/exceptional severity) and add it as a bountyTiers field. Costs 1 extra HTTP request per program, shared with programsIncludeScope/programsIncludeProgramStats if any are enabled (only one extra request per program either way; triggers the program-scope-detail charge event once per program where detail was fetched). Off by default. Only used in programs mode.
For each program, add a programStats field (submission/accepted counts, total/average payout, award-rep/collaboration/skip-triage flags, and a public recent-activity feed + recent contributor list) parsed from the same public program-detail payload as programsIncludeScope/programsIncludeBountyTable. Shares the same 1 extra HTTP request per program (only one extra request per program regardless of how many of these three flags are on; triggers the program-scope-detail charge event once per program where detail was fetched). Off by default. Only used in programs mode.
For each program, fetch its public per-program leaderboard (top researchers ranked on that specific program) and add it as a topResearchers field. Costs 1 extra HTTP request per program, shared with programsIncludeResponseTimes if both are enabled (triggers the program-activity-detail charge event once per program where at least one of the two succeeded). Off by default. Only used in programs mode.
For each program, fetch its public 90-day average response-time stats (time to first response, time to triage, time to decision, in seconds) and add it as a responseTimes90d field. Costs 1 extra HTTP request per program, shared with programsIncludeLeaderboard if both are enabled (triggers the program-activity-detail charge event once per program where at least one of the two succeeded). Off by default. Only used in programs mode.
0-indexed program directory page to start from. Only used in programs mode.
Leaderboard ranking window. Only used in leaderboard/researchers mode.
Which of the public platform leaderboard's two ranked boards to fetch (matches the site's own leaderboard-type dropdown): 1 = all severities (default, ranked by total reputation), 2 = high-to-exceptional-severity findings only. Only used in leaderboard/researchers mode.
Specific researcher handles (as in https://app.intigriti.com/profile/) to fetch public profile data for. If left empty in researchers mode, the top researchers from the public platform leaderboard are used instead.
[]Case-insensitive partial-handle search, only used when usernames is left empty in researchers mode. Fetches the public leaderboard (up to 100 researchers) and keeps only handles containing this text -- the same substring match the leaderboard page's own "Filter text" box does client-side (there is no server-side researcher-name-search API; confirmed via a real browser network capture, see intigriti_api_notes.md).