Authorization bypass in multi-tenant API
Private disclosure. Rendered as an abstracted case study to avoid exposing target or report details.
Private program · Impact confirmedWork
Bug bounty profiles and public platform signals.
Public profile links are listed directly. Private reports, program names, and sensitive bounty details stay off the site.
Profiles
Live bug bounty stats.
Public aggregate signals from each platform, synced automatically. Private report and program details stay off the site.
intigriti@profile ~ $ stats
Rank #12
8,696
reputation
683
submissions
442
accepted
Streak tier
Critical
219 pts · 90d
Valid ratio97.9%
hackerone@profile ~ $ stats
89th · impact
1,491
reputation
42
thanks
12
badges
5.5
signal
Signal80th
Impact89th
Public stats · synced Oct 25, 2026 16:00 UTC
Selected work
Public findings and privacy-safe case studies.
Published material links to its source. Confidential work is reduced to vulnerability class, impact boundary, and method.