greenfire

1 year in bug bounty on intigriti programs

Freelancing Career • Freiberufler

Mar 2025 - Jun 2026 • 1 yr 3 mos

Over the course of one year on Intigriti, I hunted across more than 20 programs spanning different industries, each with its own API architecture, business logic, and access control model. I approached every program as an individual project — spending a minimum of two weeks and often a full month mapping functions, understanding data flows, and identifying attack surface before testing. Out of 51 reports submitted, 21 were validated as real vulnerabilities and 14 were rewarded with bounties. I also submitted a P2 on Bugcrowd that was accepted but closed as a duplicate — confirming the finding was legitimate. Each program expanded my pattern recognition and introduced techniques I hadn't encountered before, making the breadth of targets as valuable as the bugs themselves.