Feature Request
Expand ScopeVault beyond HackerOne to support additional bug bounty platforms with researcher-facing APIs.
Platforms to integrate
| Platform |
API Type |
Priority |
Notes |
| Intigriti |
REST API |
High |
Growing EU base, excellent triage speed |
| YesWeHack |
REST API |
Medium |
EU-focused, API-based platform with full integration support |
| Immunefi |
REST API (read-only) |
Low |
Web3/DeFi, can list programs and scope but no report management |
Excluded platforms (no researcher-facing API)
- Bugcrowd -- API is customer-only; AI Connect is for customers piping data to AI/ML, not researcher access
- Synack -- Enterprise API only, no official researcher API (community lib uses undocumented endpoints)
- Cobalt -- API is customer-facing for managing pentests, no researcher portal API
- HackenProof -- No documented API for researchers
Implementation approach
Each platform needs an adapter implementing the existing BaseAdapter interface:
fetch_programs() - list programs
fetch_program_detail() - program details
fetch_scope() - scope assets for a program
fetch_reports() - user's reports (where supported)
fetch_report_detail() - report detail with activities (where supported)
Architecture
The adapter pattern is already in place (apps/api/scopevault/adapters/). Each new platform needs:
- A new adapter file (e.g.,
intigriti.py)
- Auth configuration in settings (API keys/tokens per platform)
- Response mapping to the existing
ProgramData, ScopeAssetData, ReportData models
- Platform-specific rate limiting configuration
Settings UI
- Onboarding wizard should support multi-platform setup
- Settings page needs per-platform credential management
Feature Request
Expand ScopeVault beyond HackerOne to support additional bug bounty platforms with researcher-facing APIs.
Platforms to integrate
Excluded platforms (no researcher-facing API)
Implementation approach
Each platform needs an adapter implementing the existing
BaseAdapterinterface:fetch_programs()- list programsfetch_program_detail()- program detailsfetch_scope()- scope assets for a programfetch_reports()- user's reports (where supported)fetch_report_detail()- report detail with activities (where supported)Architecture
The adapter pattern is already in place (
apps/api/scopevault/adapters/). Each new platform needs:intigriti.py)ProgramData,ScopeAssetData,ReportDatamodelsSettings UI