Installing internal agents on Windows

Acunetix Premium+ Online lets you use internal agents to scan targets in your internal environment that are not publicly accessible from the internet or when you do not want to allow-list Acunetix cloud agents.

This article explains how to install the Acunetix internal agent in a Windows environment. You can also install internal agents using Docker Desktop. For more information, refer to:

Limitations for internal agents

When the site is internal, and you prefer using internal agents for the scan, you cannot create a new Login Sequence Record (LSR) or Business Logic Record. However, you can import them. For further information about recording and downloading an LSR, refer to Using the Login Sequence Recorder.

Prerequisites

System requirements

  • Windows running on at least a 2-core CPU 64bit processor
  • Dedicated memory: minimum of 2 GB RAM
  • At least 50GB of HDD

Access requirements

  • Administrator privileges for command execution
  • System or Platform Administrator role on Acunetix

Allowlisting requirements

For internal agents to work properly, you need to allowlist the following URLs:

  • online.acunetix.com
  • app.invicti.com (EU-based customers: app-eu.invicti.com)  
  • sca.acunetix.com
  • bxss.me
  • sb.bxss.me
  • acusensor.acunetix.com

For more information, refer to Allowlisting requirements for agents.

NOTE: If you are running multiple concurrent scans with internal agents, your RAM and CPU need to be exponentially greater than the specified installation requirements.

  • Running 2 concurrent scans requires 6 GB RAM + 2-core CPU
  • Running 3 concurrent scans requires 8 GB RAM + 3-core CPU
  • Running 4 concurrent scans requires 10 GB RAM + 4-core CPU

Any additional concurrent scan requires +2 GB RAM and +1 core.

How to install an internal agent on Windows

  1. Log in to Acunetix.
  2. From the main menu, select Agents.
  3. Click Agent Installation Instructions.

  1. Select Windows.

  1. Enter a name for your internal agent.

  1. Create a folder where you will save the internal agent.

  1. Click Download Windows Agent. When the invicti-agent.exe file is downloaded, move it to the folder created in Step 6 above.

  1. Copy the command from Step 5 in the Agent Installation Instructions.

  1. As a user without administrative privileges, open Terminal and navigate to the folder where you saved the downloaded invicti-agent.exe file. Alternatively, right-click the folder with the file and select 'Open in Terminal.'

  1. Paste and execute the command copied in Step 8 above to register the internal agent with your Acunetix account.

  1. Copy the command from Step 6 in the Agent Installation Instructions.

  1. As a user with administrative privileges, open Terminal and navigate to the folder where you saved the downloaded invicti-agent.exe file. Alternatively, right-click the folder with the file and select 'Open in Terminal.'

  1. Paste and run the command copied in Step 11 above. This installs the agent as a service so that it is ready to start executing scans.

Your internal agent is now installed. You can view your internal agents in Acunetix by going to the Agents page.

You can now assign targets to the installed internal agent and commence testing your website.

Troubleshooting

To troubleshoot any issues, check the logs located in the logs folder within the agent installation directory you created.

If you encounter an error when starting the agent, try adding Local Service permission inside the agent folder. To do this, right-click on your agent folder and select Properties > Security > Edit > Add. Then type Local Service in the text field and click OK > Apply. Once completed, navigate to Services to start the agent service.

For further assistance, contact our Support team.

Uninstall the service

If you need to uninstall the service, run the following command as a user with administrative privileges:

.\invicti-agent.exe service -u --log-level=info --log-file

 

« Back to the Acunetix Support Page