Managing Notifications

In Acunetix 360, you can view all the configured Notifications from the Manage Notifications window. You can Create, Clone, Edit and Delete existing Notifications.

You can also configure a notification to inform email and SMS recipients, including recipients external to Acunetix 360, following a Scan Completed event. So, you and your team members can be notified about the status of a web application security scan or when specific vulnerabilities are identified on the web applications you are scanning.

Not all web applications and vulnerabilities have the same criticality. The urgency of fixing a cross-site scripting (XSS) vulnerability on a staging website is different from that of a cross-site scripting vulnerability on a live website.

  • The live website needs immediate attention because it is available to the public and attackers can easily find vulnerabilities and exploit them.
  • On the other hand, finding vulnerabilities on a staging website is expected. After all, that is the purpose of scanning a staging website for vulnerabilities; to identify them before the code is migrated to a live environment.

New Notification Fields

This table lists and explains the columns in the New Notifications window.

Column

Description

Name

This is the name of the Notification. The default Notification names are descriptive, corresponding to the Event reported. When you create your own notification, you can enter whatever name you wish.

Status

This indicates whether the Notification is Enabled or Disabled.

Event

This states the event that the Notification reports. There options are:

  • New Scan
  • Out-of-date Technology
  • Scan Cancelled
  • Scan Failed
  • Scan Completed
  • Scheduled Scan Launch Failed

Group

This is an option that enables users to get one summary notification instead of separate notifications within a specified period. When the option is enabled, a slider is displayed, which ranges from 10 to 240 minutes.

The options are:

  • Disabled
  • Enabled

Scope

This indicates that the notification will be sent if the scan is related to the website or website group. The options are:

  • Any Website – Notification definitions will be applied to all websites
  • Website Group – Notifications will be sent if the Scan is related to any Website in the group
  • When the Website Group option is selected, a drop-down appears so that you can select a website group.
  • Website – Notifications will be sent if the Scan is related to the selected website
  • When the Website option is selected, a drop-down to select a website and relevant scan group appears. You can select a scan group to receive notification about that scan group. For further information, see Scan Groups in Acunetix 360.

Email Recipients

This is a list of the names and email addresses of the recipients that will receive an email notification.

SMS Recipients

This is a list of the names and phone numbers of the recipients that will receive an SMS notification.

Add Attachment Report

This is a field that is displayed when the Scan Completed option is selected in Event.

It enables you to specify various reports by adding information on report types and format. Reports will be sent as email attachments. Select New Report to select report type and Clear to delete it.

Excluded Recipients

This is a list of the names of recipients that will not receive notifications related to this rule.

Integration Endpoints

Enter the Integration Endpoint name if required. This is a list of configured integration, and is currently only available if you select the New Scan option in the Event dropdown, and only for Slack integrations.

Add Filter

This is a field that is displayed when the Scan Completed option is selected in Event.

It enables you to specify the filtering options for vulnerabilities by adding filters. Vulnerabilities matched by the filter will be sent in the notification. Select New Filter to select filter specifications and Clear to delete it.


Filter fields are Field, Operator, and Value.

Filters

Email and SMS notifications are sent for selected events, and you can apply filters to Email and SMS notifications.

For example, you may want to receive an email notification only if Acunetix 360 identified a vulnerability whose severity level is High or above. If set, Acunetix 360 will send notification(s) only if it detects such vulnerabilities. Otherwise, it will not send any notifications. If you do not set any filters, you can receive all notifications about vulnerabilities.

Similarly, integrations are sent according to the filters you specify. If you do not specify any filters, all detected issues are sent to the integrations you selected. You can create more effective and dynamic filters with this option.

This table lists and explains the fields in the Field column of Add Filter.

Column

Description

Severity

Specify a Severity level. Clarify this level with the help of logical operators.

Is Confirmed

Use the Is Confirmed filter if you want to be notified of verified issues.

Certainty

Provide a Certainty percentage (between 0-100) according to the accuracy of the issue. Clarify the precision with the help of logical operators.

State

Specify a State level. Use this filter if you want to receive a notification about the status of issue(s).

This option only appears in the Integration Endpoint filtering.

The state levels are explained as follows:

  • New – This indicates that this issue has been identified for the first time.
  • Not Found – This indicates Netsparker had not found this vulnerability in that scan
  • Not Fixed – This indicates the vulnerability has not been fixed.
  • Fixed – This indicates the vulnerability has been fixed.
  • Revived – This indicates that the issue had been fixed in previous scans but revived again.
How to Create a Notification
  1. Log in to Acunetix 360.
  2. From the main menu, select Notifications > New Notification.

  1. In the Name field, enter the name of the new notification.
  2. In the Status field, select enable or disable.
  3. From the Event dropdown, select the relevant option.
  4. In the Group field, select enable or disable.
  5. From the Scope field, select the relevant option.
  6. In the Email Recipients field, select and enter a recipient. In the SMS Recipients field, select or enter a recipient. If you have selected Scan Completed from the Event drop-down (above), you can add a recipient that is not registered and confirmed.

  1. If you selected Scan Completed from the Event drop-down, the Add Filter and Add Attachment Report options are activated. Set your filters, if required.

  1. In the Excluded Recipients field, select and enter a recipient.
  2. In the Integration Endpoints field, select an integration, if required. You can add a filter when Scan Completed from the Event drop-down is selected.

  1. Select Save.
How to Clone a Notification
  1. Log in to Acunetix 360.
  2. From the main menu, select Notifications > Manage Notifications.
  3. Next to the notification you want to clone, select Clone.
  4. On the New Notification window, in the Name field, enter a name.
  5. Edit the remaining fields, if relevant. (See How to Create a Notification)
  6. Select Save.
How to Edit a Notification
  1. Log in to Acunetix 360.
  2. From the main menu, select Notifications > Manage Notifications.
  3. Next to the notifications you want to edit, select Edit.
  1. On the Update Notification window, in the Name field, edit the name.
  2. Edit the remaining fields, if relevant. (See How to Create a Notification)
  3. Select Save.
How to Delete a Notification
  1. Log in to Acunetix 360.
  2. From the main menu, select Notifications > Manage Notifications.
  3. Next to the notification you want to delete, select Delete.
  4. From the Delete Notification dialog, select Delete.
How to Configure a Notification to Email a Report After a Scan
  1. Log in to Acunetix 360.
  2. From the main menu, select Notifications > Manage Notification.
  3. For any notification with an Event of Scan Completed, select Edit.
  1. On the Update Notification window, if required, in the Email Recipients field, enter additional registered recipients or a valid email address of an external recipient.
  2. In the Add Attachment Report field, select New Report. New Report and Format dropdowns are displayed.
  3. From the Report and Format drop-downs, select an attachment(s) report to add to the email notification (a maximum of three report types is allowed).
  4. Select Save.

The specified reports following configured scans that are completed will now be sent as email attachments in the email notification sent to the specified recipients.

 

« Back to the Acunetix Support Page