wildhunter logo
Back to programs

Capture Our Flag

Capture Our Flag · Intigriti · launch date not exposed by platform

High competitionWebApi

Software — live public bug bounty program on Intigriti.

Metrics

Bounty range$0 – $55k
Paid this month$0
Reports0/mo
Hunters0

Beginner fit

54/100

Estimated: this program accepts low-severity findings worth reporting.

Time to triage3d
Time to first bounty21d

Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.

Engage

Open on Intigriti

Always read the full policy on the platform before submitting. Scope below is a summary only.

Scope assets1
Bounty floor$0

In-scope assets

  • intigriti: captureourflag

Full in-scope list is on the Intigriti program page.

Wanted categories

General

Who should hunt here

Beginners

A stretch
  • 1 asset in scope gives you room to explore without fighting a crowd for the same endpoints.
  • Fast feedback — triage lands in ~3 days, so you learn what this team pays for quickly.

Intermediate

Workable
  • Real ceilings — payouts reach $55k, so chaining two medium findings into one report actually pays.
  • APIs are in scope — where medium hunters get paid: broken object-level authorization, mass assignment, and rate-limit gaps.

Pros

High value
  • $55k ceiling — worth deep recon and targeted fuzzing; one critical here outearns a month of small programs.

Think twice if

  • Heavily crowded — duplicates arrive within hours; only novel vectors or automation win here.
  • Intigriti doesn't publish report volume — the competition and fit scores here are conservative estimates, not measurements.
  • Narrow scope (1 asset) — limited room if you're looking for breadth.
  • Program age is unknown — Intigriti doesn't expose start dates, so "freshness" can't be verified.

Where these numbers come from

Live from Intigriti

  • Bounty range (converted EUR → USD) — live Intigriti API
  • Program status, type & industry — live Intigriti API

Modeled estimates

  • In-scope assets — the researcher API restricts scope data to the program page (the full list is linked below)
  • Report volume — not exposed; competition is scored from neutral defaults
  • Triage & payout speed — modeled, not measured
  • Beginner fit — computed from the signals above (methodology on this page)