Integrating Invicti with Other Applications

You can integrate Invicti not only with issue trackers and CI/CD software but with many other systems. You can use data from many other applications to seed your Invicti scans and you can also use Invicti scan results in other applications.

You can import data into Invicti to use it before crawling the target application. In most cases, this is not necessary but sometimes parts of the web application are not linked or otherwise hidden from crawlers. You can import crawl data from the following applications and in the following formats:

Web browser automation tools: Selenium
Security testing proxies: Telerik Fiddler, Postman, Burp
RESTful API definition languages: Swagger 2.0 and 3.0, and WADL
SOAP API Definition Languages: WSDL
ASP.NET Web Forms project files, HTTP archives (HAR), or simple text files with a list of URLs

You can export the Invicti scan results to be used directly as web application firewall (WAF) rules. This allows you to temporarily prevent attackers from exploiting high-severity vulnerabilities until you are able to fix them. You can export data that can be used directly by the following WAFs:

Imperva SecureSphere
F5 BIG-IP Application Security Manager
Fortinet FortiWeb
Citrix Web Application Firewall

You can also export Invicti scan results to XML in a generic format that you can use in other/custom applications.

In addition to import and export capabilities and easy-to-configure integrations, all Invicti capabilities are available using a RESTful API. Using the API, you can access all the product features: manage targets, run scans, get scan results, get vulnerability details, and more. Using the API, you can integrate Invicti with any other system in your environment. In the case of enterprise customers, Invicti experts can help to build integration and/or provide custom options.