Intigriti
Antwerp bug bounty platform with managed vulnerability disclosure, pentest as a service and in-house triage
Quick Overview
| Company | Intigriti NV |
|---|---|
| Category | Bug Bounty Platforms |
| Headquarters | Antwerp, Belgium |
| Founded | 2016 |
| EU Presence | Yes - Belgium (EU) |
| Data Location | Not stated on the pages checked; stored data is encrypted at application level |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Bug bounty, managed VDP, pentest as a service (Focused, Comprehensive, Certified), live hacking events, CrowdRecon (beta), AI security and safety programs, in-house triage, integrations, trust center |
| Pricing | Plans named Core, Premium and Enterprise; prices on request |
| Best For | Companies that want a bounty and a pentest-as-a-service option from one Belgian vendor |
| Replaces | HackerOne, Bugcrowd |
Detailed Review
Intigriti runs the platform where companies host public or invite-only bug bounty programs and a community of independent researchers submits findings. Its company information page names Intigriti NV, Klokstraat 16, Antwerp as the operator, with Belgian VAT and register numbers.
The about page says the company was founded in 2016, has more than 100 employees across Belgium, the UK, the US, the Netherlands and South Africa, and closed a EUR 21 million Series B round in 2022.
Three Products on One Platform
Besides the bounty, Intigriti sells a managed vulnerability disclosure program and a pentest-as-a-service offer in three types: Focused, Comprehensive and Certified. The Certified type is aimed at regulated organisations and lists CREST-accredited deliverables.
Live hacking events and a beta product called CrowdRecon extend the range for focused, time-boxed testing.
Triage and Encryption
The bug bounty page says an in-house triage team vets all incoming reports, and the platform pages mention access to more than 150,000 independent researchers. A published blog post explains that stored data is encrypted at the application level by default.
The vendor describes a focus on GDPR and EU legal compliance and lists SOC 2 and ISO 27001 credentials in its trust center.
AI Security Programs
A newer section covers AI security and safety: bounty programs scoped around AI features, where the program defines what a valid finding is for a given system and triage is managed throughout.
This matters for teams shipping LLM features whose failure modes differ from a classic web scope.
Limitations to Consider
Intigriti publishes plan names but no prices, so cost comparison needs a quote. The pages checked do not state where platform data is hosted, only that stored data is application-level encrypted, so ask for the hosting location in procurement. The company has staff and offices in the US and the UK as well, which is worth checking against the entity that signs your order form. For a French vendor with a stated EU-only hosting see YesWeHack.
Who Should Use Intigriti
Security teams in Europe that want a bounty platform with a Belgian contracting entity and an option to add pentests or a disclosure program later.
Pros and Cons
Pros
- Belgian entity (Intigriti NV) as operator
- In-house triage of incoming reports
- Bounty, VDP and PTaaS in one place
- Application-level encryption of stored data
- AI security and safety programs
Cons
- No prices published
- Hosting location not stated on pages checked
- PTaaS offer is marked beta on the product page
- Offices in the US and UK besides Belgium
Alternatives to Intigriti
Other European bug bounty platforms worth comparing before you decide:
YesWeHack
France · Paris bug bounty and exposure platform hosted in an EU private cloud
Yogosha
France · Vetted researcher community for pentests and private bounties
Detectify
Sweden · Stockholm attack-surface and application scanner with ethical-hacker payloads
Pentest-Tools.com
Romania · Bucharest pentest toolkit with scanners, exploiters and reporting
See all European bug bounty platforms or compare them directly against HackerOne on our alternatives page.
Frequently Asked Questions
The company information page names Intigriti NV, Klokstraat 16, Antwerp, Belgium as the operator of the website, with a Belgian VAT number and an Antwerp register entry.
Yes. It sells pentest as a service in three types, Focused, Comprehensive and Certified, with a dedicated researcher, a pentest report and a letter of attestation listed among the features.
No. The pricing page lists Core, Premium and Enterprise plans and asks you to request pricing.