CISO Tribune

Vendor comparison · 2 companies

Intigriti vs NCC Group

Intigriti is a cybersecurity company that works with ethical hackers worldwide to protect digital information. NCC Group is a global cyber security and resilience company with over 2000 colleagues around the world. CISO Tribune files both under Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Intigriti
  • NCC Group
Intigriti vs NCC Group: Products, Customers and Funding Compared
IntigritiIntigriti is a cybersecurity company that works with ethical hackers worldwide to protect digital information.intigriti.comNCC GroupNCC Group is a global cyber security and resilience company with over 2000 colleagues around the world.nccgroup.com
What it sells
  • Bug bounty[1][2][3][4]Ethical hackers test a company's web applications, enterprise infrastructure and other digital assets for security vulnerabilities.
  • Vulnerability Disclosure Program[2]A vulnerability disclosure program offered by Intigriti.
  • Live hacking events[1][3]Targeted engagements where hand-picked ethical hackers hunt for vulnerabilities in a specific company's systems.
  • Penetration Testing Services[1]Security assessments that test an organization's systems to find weaknesses.
  • Continuous Penetration Testing[1]Ongoing testing of environments rather than a single point-in-time engagement.
  • Managed Extended Detection & Response (MXDR)[1]A managed service that monitors customer environments and detects and responds to threats, offered for Microsoft and Splunk tooling.
  • Attack Surface Management[1]Continuous monitoring of an organization's external-facing assets from an attacker's perspective.
  • Cyber Incident Response Retainer[1]A retainer service providing digital forensics and incident response support for critical assets.
  • Online Exposure Monitoring[1]Continuous monitoring of the surface, deep and dark web to reduce the risk and impact of cyber attacks.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • March 1, 2026Intigriti announced a collaboration with PortSwigger to reward high-performing researchers on its platform.[5]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 13, 2026[6]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
The pages address eCommerce platforms and transactional websites, including payment systems and sensitive customer data. Intigriti offers programs for mobile applications on iOS and Android. Customers can take bug bounty alone or a blend of continuous and focused testing. Intigriti delivers its services on a multi-solution SaaS platform.NCC Group also addresses Hyperscalers and their clients that are undertaking cloud transformation. Industrial organizations facing regulatory complexity across global operations and supply chains are another group it addresses. Its customer examples include a private university and a major professional services client.
Last verified
November 13, 2026November 4, 2026

Where they overlap

  • Intigriti and NCC Group are both filed under Penetration testing and red team services.

Where they differ, field by field

  • Intigriti's primary category is Bug bounty and crowdsourced testing; NCC Group's is Penetration testing and red team services.
  • NCC Group is also filed under Incident response and forensics, MDR and managed SOC and External attack surface management.
  • Intigriti lists Bug bounty, Vulnerability Disclosure Program and Live hacking events. NCC Group lists Penetration Testing Services, Continuous Penetration Testing, Managed Extended Detection & Response (MXDR), Attack Surface Management, Cyber Incident Response Retainer and 1 more.

What it sells: Intigriti

What Bug bounty does[1][2][3][4]
Intigriti describes a bug bounty program as an initiative that rewards individuals for finding and reporting software vulnerabilities. Organizations invite security researchers through Intigriti's bug bounty platform to identify and submit bugs in their software. Intigriti's triage team vets every submission from its ethical hackers. Intigriti offers programs for mobile applications, targeting both iOS and Android vulnerabilities.
What Vulnerability Disclosure Program does[2]
Intigriti offers a Vulnerability Disclosure Program. Intigriti describes vulnerability disclosure as including the process of reporting a vulnerability to the affected party. Intigriti offers continuous testing with bug bounty and managed VDPs.
What Live hacking events does[1][3]
Intigriti live hacking events are targeted engagements where hand-picked ethical hackers are invited to hunt for vulnerabilities in a specific company's systems. Intigriti also runs conference hacking events that take place on site at existing industry gatherings.

Questions about Intigriti and NCC Group

What do Intigriti and NCC Group sell?
Intigriti sells Bug bounty, Vulnerability Disclosure Program and Live hacking events. NCC Group sells Penetration Testing Services, Continuous Penetration Testing, Managed Extended Detection & Response (MXDR), Attack Surface Management, Cyber Incident Response Retainer and 1 more.
Are Intigriti and NCC Group in the same category?
They share Penetration testing and red team services. Intigriti's primary category is Bug bounty and crowdsourced testing and NCC Group's is Penetration testing and red team services.
Who are Intigriti and NCC Group sold to?
The pages address eCommerce platforms and transactional websites, including payment systems and sensitive customer data. NCC Group also addresses Hyperscalers and their clients that are undertaking cloud transformation.
What have Intigriti and NCC Group announced recently?
March 1, 2026: Intigriti announced a collaboration with PortSwigger to reward high-performing researchers on its platform.

About Intigriti

Intigriti is a cybersecurity company that works with ethical hackers worldwide to protect digital information. Intigriti gives customers access to 150K+ vetted security researchers, known as ethical hackers. Intigriti pairs bug bounty coverage with on-demand PTaaS for security deep dives. Intigriti offers bug bounty, VDP and PTaaS, alone or in combination. Intigriti delivers its services on a multi-solution SaaS platform.[1][2][3][4]

Intigriti describes a bug bounty program as an initiative that rewards individuals for finding and reporting software vulnerabilities. Organizations invite security researchers through Intigriti's bug bounty platform to identify and submit bugs in their software. The severity and impact of a bug often determine the reward, and Intigriti uses a contextual CVSS standard to support this process. Intigriti's triage team vets every submission from its ethical hackers. Intigriti offers programs specifically for mobile applications, targeting both iOS and Android vulnerabilities.[2][3]

Intigriti describes PTaaS programs as pay for value and time boxed. Intigriti offers continuous testing with bug bounty and managed VDPs, plus targeted PTaaS. Intigriti offers a Vulnerability Disclosure Program. Intigriti describes vulnerability disclosure as including the process of reporting a vulnerability to the affected party, while bug bounties are structured programs that provide rewards for such reports.[1][2][3][4]

Intigriti typically runs two types of hacking events. Intigriti live hacking events are targeted engagements where hand-picked ethical hackers are invited to hunt for vulnerabilities in a specific company's systems. Intigriti conference hacking events take place on site at existing industry gatherings.[1][3]

Intigriti's network of 150,000+ ethical hackers provides crowdsourced security for eCommerce platforms and transactional websites. Intigriti says eCommerce sites face diverse threats, including payment fraud, account takeovers, injection attacks, DDoS and supply chain exploits. Intigriti says its eCommerce testing can analyze touchpoints from POS systems and mobile checkout to loyalty apps and supplier portals. For payment systems, Intigriti describes identifying flaws in payment processing logic and insecure integrations. For account takeover, Intigriti describes uncovering brute force vulnerabilities, reset flows and exposed session tokens.[4]

Intel, Microsoft and Personio are named as organizations that use bug bounty and the crowd. Smart Pension runs a bug bounty program on Intigriti. Innogames is given as an example of a mobile application program on Intigriti. Intigriti states that its platform is GDPR-compliant with data hosted exclusively in Europe.[1][2][3][4]

Intigriti on the record

Sources

Intigriti full record

  1. [1]intigriti.comIntigriti · intigriti.com · undated page, accessed November 13, 2026 · Tier A
  2. [2]Experience Intigriti's Bug Bounty Platform Tours | IntigritiIntigriti · undated page, accessed November 13, 2026 · Tier A
  3. [3]Leading global bug bounty platform | IntigritiIntigriti · undated page, accessed November 13, 2026 · Tier A
  4. [4]eCommerce and transactional websites | IntigritiIntigriti · undated page, accessed November 13, 2026 · Tier A
  5. [5]Intigriti Bug Bytes #234 - March 2026 | IntigritiIntigriti · published March 1, 2026 · Tier A
  6. [6]Intigriti Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 13, 2026 · Tier C

NCC Group full record

  1. [1]nccgroup.comNCC Group · nccgroup.com · undated page, accessed November 4, 2026 · Tier A
  2. [2]Case Study: Digital Forensics for Tulane University | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  3. [3]NCC Group | Leading Cyber Security & Managed ServicesNCC Group · undated page, accessed November 10, 2026 · Tier A
  4. [4]Reflections from the 2025 Auto-ISAC Cybersecurity Summit | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  5. [5]Penetration Testing Services | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  6. [6]Managed Security Services | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  7. [7]Cloud & Digital Transformation Security Solutions | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  8. [8]Proactive Security | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  9. [9]Operational Technology (OT) Security | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  10. [10]Digital Identity Solutions | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  11. [11]Supply Chain & Third-Party Cyber Risk | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  12. [12]Case Study: Cloud Migration for Professional Services | NCC GroupNCC Group · undated page, accessed November 10, 2026 · Tier A
  13. [13]NCC Group Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.