intigriti.com

HTML metadata

Title: Leading global bug bounty platform | Intigriti
Description: See your security through a hacker's eyes. Bug bounty, pentesting, & VDP solutions to defend with the best. Secure your assets with elite ethical hackers.
Language: en
Canonical: https://www.intigriti.com/index

Open Graph

title: Leading global bug bounty platform
locale: en
site name: Intigriti
description: See your security through a hacker's eyes. Bug bounty, pentesting, & VDP solutions to defend with the best. Secure your assets with elite ethical hackers.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (4)

www.datocms-assets.com×208
www.googletagmanager.com×2
cdn-cookieyes.com×1
widget.intercom.io×1

Social

Contact

Address: st centerPrivacy statementTerms & conditionsCorporate policySwag shop© Intigriti 2026

Registration

Registrar

Gandi SAS

Created

2013-01-18

Expires

2027-01-18 243 days left

Updated

2025-12-18

Name servers

ns-1346.awsdns-40.org
ns-1585.awsdns-06.co.uk
ns-455.awsdns-56.com
ns-847.awsdns-41.net

DNS records live

NS

ns-1346.awsdns-40.org
ns-1585.awsdns-06.co.uk
ns-455.awsdns-56.com
ns-847.awsdns-41.net

MX

0 intigriti-com.mail.protection.outlook.com

TXT

Show 17 TXT records

notion-domain-verification=Y6zadCLSKdfUZr9xmzM8x5FxrarEN2xt5aSxa8JM4IJ
miro-verification=e36738d2f893a1f242104b8841c54eb4285ceb61
TAILSCALE-dFexkm6Y2U9BawrJKhZf
slack-domain-verification=GIoghBU979lzXHSfTf3J1wncvmepSj5Z4pogpLXm
uber-domain-verification=eb610866-c164-4457-b02c-156a5d7276c3
uber-domain-verification=9603f461-6386-4613-a286-eaaea01c2ff5
twilio-domain-verification=3ea651a6e2cb6ed7553d3e197d575e44
mongodb-site-verification=TLA3tcPoc9PojCi8vuzitI08jS5vSjou
google-site-verification=y3nUPG3kPYzbuzBh9u-H-C7Z__z_4onRJdVMnnz42zs
google-site-verification=isuVFA2PAlickfTwMZNDd5xMSuK8sGEeWcFdMBETf5E
google-site-verification=jV_ZsV5a60r7eVKIuE8-a0umJuMu1HsBRAmqgkFHvZE
facebook-domain-verification=8gjznr441y1gzyvfhzuuvlraki7ib2
openai-domain-verification=dv-5DMXuSHLNQ2PPQE2vLUAvjuB
mailerlite-domain-verification=91ef2a477473b6aae12bdc4010cd4cdc47b06849
jetbrains-domain-verification=27ioiuztd02mwwxaegd60qtq0
canva-site-verification=VGhqZZNBE-3X0609oElT0g
apple-domain-verification= lFz5DGNfmck49lix

Email authentication strong

SPF

v=spf1 include:_spf.mlsend.com include:amazonses.com include:spf.protection.outlook.com include:7473434.spf03.hubspotemail.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:postmaster@intigriti.com; pct=100; sp=reject;

policy: reject (enforced) · sp=reject

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvlj+i1taO/KYXVaiopCTs5FhHeYT6PDHwKLFdnoh0/WMbRMChyuKQSQ/akyZBKuhxNaPTU8gAXsdilaZ02P…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-05-11 to 2026-08-09

Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.intigriti.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), geolocation=(), microphone=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src *; font-src 'self' fonts.gstatic.com fonts.googleapis.com fonts.intercomcdn.com fonts.mailerlite.com assets.mlcdn.com data:; frame-ancestors 'self' https://plugins-cdn.datocms.com https://intigriti.admin.datocms.com; frame-src *; img-src * data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' * blob:; script-src-elem 'self' 'unsafe-inline' * blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com assets.mailerlite.com fonts.mailerlite.com assets.mlcdn.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' www.gstatic.com fonts.googleapis.com tags.srv.stackadapt.com assets.mailerlite.com fonts.mailerlite.com assets.mlcdn.com; worker-src 'self' blob:; object-src 'none'; manifest-src 'self'; media-src 'self' https://www.datocms-assets.com https://image.mux.com https://*.mux.com blob:;
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups