Intigriti
Application Security- Overview
- Setup
- Data & mappings
- Operations & API
- Changelog
The Intigriti connector integrates with the Intigriti bug bounty and vulnerability disclosure platform. It synchronizes bug bounty programs, security submissions (findings), finding definitions, and target sites into the Brinqa platform.
Data retrieved from Intigriti
| Connector Object | Required | Maps to Data Model |
|---|---|---|
| Program | Yes | — |
| Pentest Finding | Yes | Pentest Finding |
| Pentest Finding Definition | Yes | Pentest Finding Definition |
| Site | Yes | Site |
Model relationships
For detailed steps on how to view the data retrieved from Intigriti in the Brinqa Platform, see How to view your data.
Connection settings
When setting up a data integration, select Intigriti from the Connector dropdown and provide the following:
| Setting | Required | Default | Description |
|---|---|---|---|
| Access token | Yes | — | Intigriti API access token(non expiring) |
How to obtain Intigriti credentials
[Add connector-specific credential steps. Templated placeholder — review before publish.]
Attribute mappings
Expand the sections below to view the mappings between the source and the Brinqa data model attributes:
Program
| Source Field Name | SDM Attribute |
|---|---|
| Generated (asset categories) | CATEGORIES |
| Generated (program status) | STATUS |
Instant.now() | LAST_CAPTURED |
ProgramResource.companyHandle | COMPANY_HANDLE |
ProgramResource.companyId | COMPANY_ID |
ProgramResource.confidentialityLevel.value | CONFIDENTIALITY_LEVEL |
ProgramResource.createdAt | CREATED_AT |
ProgramResource.description | DESCRIPTION |
ProgramResource.domain[].description | DOMAIN_DESCRIPTION |
ProgramResource.domain[].endpoint | DOMAIN_ENDPOINT |
ProgramResource.domain[].id | DOMAIN_ID |
ProgramResource.domain[].tier.value | DOMAIN_TIER |
ProgramResource.domain[].type.value | DOMAIN_TYPE |
ProgramResource.handle | HANDLE |
ProgramResource.id | UID |
ProgramResource.inScope.content | IN_SCOPE |
ProgramResource.lastUpdatedAt | LAST_UPDATED_AT |
ProgramResource.maxConfidentialityLevel.value | MAX_CONFIDENTIALITY_LEVEL |
ProgramResource.name | NAME |
ProgramResource.outOfScope.content | OUT_OF_SCOPE |
ProgramResource.rulesOfEngagement.content.description | RULES_OF_ENGAGEMENT |
ProgramResource.state.status.value | STATE_STATUS |
ProgramResource.webLinks.details | WEB_LINKS_DETAILS |
Pentest Finding
| Source Field Name | SDM Attribute |
|---|---|
Instant.now() | LAST_CAPTURED |
SubmissionResource.assignee.email | ASSIGNEE_EMAIL |
SubmissionResource.assignee.role | ASSIGNEE_ROLE |
SubmissionResource.assignee.userId | ASSIGNEE_USER_ID |
SubmissionResource.assignee.userName | ASSIGNEE_USER_NAME |
SubmissionResource.awaitingFeedback | AWAITING_FEEDBACK |
SubmissionResource.code | UID |
SubmissionResource.code | NAME |
SubmissionResource.code | TYPE |
SubmissionResource.createdAt | SOURCE_CREATED_DATE |
SubmissionResource.groupId | GROUP_ID |
SubmissionResource.lastUpdated.lastUpdatedAt | LAST_UPDATED_AT |
SubmissionResource.lastUpdated.lastUpdater.userId | LAST_UPDATED_USER_ID |
SubmissionResource.originators.programId | PROGRAM_ID |
SubmissionResource.report.domain.name | TARGETS |
SubmissionResource.report.endpointVulnerableComponent | VULNERABLE_ENDPOINT_OR_COMPONENT |
SubmissionResource.report.impact | IMPACT |
SubmissionResource.report.ip | IP_ADDRESSES |
SubmissionResource.report.ip | PUBLIC_IP_ADDRESSES |
SubmissionResource.report.ip | PRIVATE_IP_ADDRESSES |
SubmissionResource.report.originalTitle | ORIGINAL_TITLE |
SubmissionResource.report.personalData | PERSONAL_DATA |
SubmissionResource.report.pocDescription | POC_DESCRIPTION |
SubmissionResource.reward.totalPayout.value | TOTAL_PAYOUT |
SubmissionResource.state.acceptedAt | FIRST_FOUND |
SubmissionResource.state.archivedAt | ARCHIVED_AT |
SubmissionResource.state.closedAt | LAST_FIXED |
SubmissionResource.state.closeReason | CLOSE_REASON |
SubmissionResource.state.status.value | STATUS |
SubmissionResource.state.status.value | PROVIDER_STATUS |
SubmissionResource.state.status.value | SOURCE_STATUS |
SubmissionResource.state.status.value | STATUS_CATEGORY |
SubmissionResource.state.validatedAt | VALIDATED_AT |
SubmissionResource.submitter.identityChecked | SUBMITTER_IDENTITY_CHECKED |
SubmissionResource.submitter.ranking.rank | SUBMITTER_RANK |
SubmissionResource.submitter.ranking.reputation | SUBMITTER_REPUTATION |
SubmissionResource.submitter.ranking.streak.value | SUBMITTER_STREAK_VALUE |
SubmissionResource.submitter.role | SUBMITTER_ROLE |
SubmissionResource.submitter.userName | SUBMITTER_USERNAME |
SubmissionResource.tags | TAGS |
SubmissionResource.title | TITLE |
SubmissionResource.webLinks.details | WEB_LINKS_DETAILS |
Pentest Finding Definition
| Source Field Name | SDM Attribute |
|---|---|
| Generated (tags) | TAGS |
Instant.now() | LAST_CAPTURED |
SubmissionResource.code | UID |
SubmissionResource.report.recommendedSolution | RECOMMENDATION |
SubmissionResource.report.type.category | CATEGORIES |
SubmissionResource.report.type.cwe | CWE_IDS |
SubmissionResource.report.type.cwe | WEAKNESSES |
SubmissionResource.report.type.name | FINDING_TYPE |
SubmissionResource.severity.id | SEVERITY_ID |
SubmissionResource.severity.value | SEVERITY |
SubmissionResource.severity.value | SOURCE_SEVERITY |
SubmissionResource.severity.value | SEVERITY_SCORE |
SubmissionResource.severity.vector | CVSS_* |
SubmissionResource.title | NAME |
Site
| Source Field Name | SDM Attribute |
|---|---|
| Generated (fixed category) | CATEGORIES |
| Generated (fixed status) | STATUS |
Instant.now() | LAST_CAPTURED |
SubmissionResource.report.domain.description | DESCRIPTION |
SubmissionResource.report.domain.motivation | REPORT_DOMAIN_MOTIVATION |
SubmissionResource.report.domain.name | UID |
SubmissionResource.report.domain.name | NAME |
SubmissionResource.report.domain.tier.id | REPORT_DOMAIN_TIER_ID |
SubmissionResource.report.domain.tier.value | REPORT_DOMAIN_TIER_VALUE |
SubmissionResource.report.domain.type.id | REPORT_DOMAIN_TYPE_ID |
SubmissionResource.report.domain.type.value | REPORT_DOMAIN_TYPE_VALUE |
Operations & API
Expand each connector object to see its operation options, delta-sync behavior, and the API it uses. See connector operation options for how to apply operation options (keys and values are case-sensitive).
Program
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Program on every run and applies no incremental date filter.
API
- Type: GraphQL query · Endpoint:
POST /api/graphql
Pentest Finding
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Pentest Finding on every run and applies no incremental date filter.
API
- Type: GraphQL query · Endpoint:
POST /api/graphql
Pentest Finding Definition
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Pentest Finding Definition on every run and applies no incremental date filter.
API
- Type: GraphQL query · Endpoint:
POST /api/graphql
Site
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Site on every run and applies no incremental date filter.
API
- Type: GraphQL query · Endpoint:
POST /api/graphql
Changelog
The Intigriti connector has undergone the following changes:
| Version | Description | Migration Steps |
|---|