Acunetix Support

• Introduction to Acunetix

• Acunetix Overview

• Acunetix licenses

• Data retention and data availability for expired licenses

• Navigation in Acunetix

• Registration and Evaluation of Acunetix Online

• Activate Acunetix Online

• Log in to Acunetix

• Whitelisting requirements for Acunetix Online – US region: https://app.invicti.com

• Whitelisting requirements for Acunetix Online – EU region: https://app-eu.invicti.com

• Whitelisting requirements for Acunetix On-Premises

• Reset the master password

• Introduction to Discovery

• Get started with Discovery

• Adjust DiscoverysSettings, Inclusions, and Exclusions

• Create targets from Web Asset Discovery

• Introduction to Predictive Risk Scoring

• Utilize Predictive Risk Scoring

• Configure Targets

• Add proxy server settings

• Scan restricted areas (Site Login)

• Login Sequence Recorder LSR files overview

• Create LSR files manually

• Convert Selenium Scripts to Acunetix LSR Files

• Enable AcuSensor

• Add PKCS #11 smart card login functionality to your targets

• Use the Business Logic Recorder (BLR)

• AcuSensor for PHP

• AcuSensor for PHP - Docker

• AcuSensor for PHP - AWS Elastic Beanstalk

• AcuSensor for .NET - Supported Scenarios

• AcuSensor for ASP .NET

• AcuSensor for ASP .NET Core

• AcuSensor for .NET - AWS Elastic Beanstalk

• Installing AcuSensor Agent for Java websites

• AcuSensor Agent for Java - Tomcat (Windows/Linux/Docker)

• AcuSensor Agent for Java - Docker (Spring Boot)

• AcuSensor for Java - Windows/Linux (JBOSS 7.4 Standalone + WAR File)

• AcuSensor for Java - Windows/Linux (Jetty 10.0.10 + WAR File)

• AcuSensor for Java - Windows/Linux (Wildfly 26.1.1 Final Standalone + WAR File)

• AcuSensor for JAVA – Linux (WebSphere Liberty 19.0.0.9+ with WAR file)

• Scan application in AWS Elastic Beanstalk (Tomcat + WAR File)

• AcuSensor for Node.js

• AcuSensor for Node.js - Docker

• AcuSensor for Node.js - AWS Elastic Beanstalk

• API types and specification formats

• Access API documentation

• API Discovery Overview

• Introduction to API Discovery Sources

• Get started with Zero Configuration API Discovery

• Install the Invicti Network Traffic Analyzer (NTA)

• Network Traffic Analyzer: Tap Plugin FAQs

• Integrate with Amazon API Gateway

• Integrate with Apigee API hub

• Integrate with Azure API Management

• Integrate with Kong Konnect

• Integrate NTA with Kong overview

• Integrate NTA with Kong in Kubernetes

• Integrate NTA with Kong in Docker

• Integrate NTA with Kong in Linux

• Integrate NTA with NGINX in Docker

• Integrate F5 BIG IP iRule with NTA

• Integrate with MuleSoft Anypoint Exchange (Acunetix Online)

• Integrate with MuleSoft Anypoint Exchange (Acunetix On-Premises)

• Manage your API Inventory

• Link and unlink discovered APIs to targets

• Overview of scanning APIs

• Scan REST APIs for vulnerabilities

• Scan SOAP APIs for vulnerabilities

• Scan GraphQL APIs for vulnerabilities

• Scan authenticated APIs

• Launch new scans

• Instant scans

• Future scans

• Recurrent scans

• Incremental scans

• Continuous scanning

• Malware scanning

• Scan authenticated web assets

• Configure auto-login

• Record a login sequence (LSR)

• Configure Form authentication with OTP

• Configure OAuth 2.0 authentication

• LSR advanced troubleshooting

• Interact with scans in progress

• Review scan results

• Runtime SCA Findings

• Reduce scan times

• Scan statuses

• Check scan coverage and address any gaps

• Scans, Preflight checks, and Network errors

• Change the maximum duration of scans (Acunetix On-Premises)

• Enable logging for a scan

• Scan data retention and scan archiving

• How Acunetix approaches FIPS

• Install internal agents on Windows

• Install internal agents using Docker

• Install internal agents with proxy settings

• Introduction to the Acunetix standalone Login Sequence Recorder

• Install Acunetix standalone Login Sequence Recorder

• Record login sequence with the Acunetix standalone LSR

• Edit LSR file with the Acunetix standalone LSR

• Use Login sequence with an internal target

• Configure General Settings

• Email Settings

• Proxy Settings

• Configure Network Scanning

• Edit Acunetix settings.xml file

• Single Sign-On Settings

• Configure Microsoft Active Directory Federation Services Integration with SAML

• Configure Microsoft Entra ID (Azure Active Directory) Integration with SAML

• Configure Google Single Sign-On Integration with SAML

• Configure Okta Single Sign-On Integration with SAML

• Configure SAML-based Single Sign-On Integration

• Configure OneLogin Secure Single Sign-On Integration with SAML

• Configure Ping Identity Single Sign-On Integration with SAML

• What is Acunetix 360?

• Comparison between Acunetix 360 On-Demand and Acunetix 360 On-Premises

• Acunetix 360 licensing

• Data retention and data availability for expired licenses

• Licensing FAQs

• Before using Acunetix 360

• Glossary

• Logging in to Acunetix 360

• Whitelisting requirements for Acunetix 360 On-Demand

• Navigation in Acunetix 360

• Quick Start Guide for Acunetix 360

• Introduction to the Dashboards

• Global Dashboard

• Using filters in Acunetix 360

• Excluding Acunetix 360 files from antivirus scans

• Downloading Invicti Standard from Acunetix 360

• Whitelisting requirements for Acunetix 360 On-Premises

• Step 1: Components, architecture, prerequisites, and download

• Step 2: Installing and configuring the web app server and AV service

• Step 3: Installing the Acunetix 360 Agent

• Step 4: Installing the Authentication Verifier Agent

• Step 5: Installing the Acunetix 360 Bridge

• Configuring a proxy for the Acunetix 360 Web Application

• Security Hardening for Acunetix 360 On-Premises

• Migrating Data in Acunetix 360 On-Premises

• Excluding Acunetix 360 files from antivirus scans

• Updating Acunetix 360 On-Premises

• Configuring Acunetix 360 for Amazon Web Services

• Configuring Acunetix 360 for Linux on Amazon Web Services (Ubuntu)

• Installing Acunetix 360 On-Premises in Silent Mode

• Installing AcuMonitor Internally

• The Discovery Service - Introduction

• Configuring the Discovery Service

• Managing the Discovered Websites List

• Configuring AWS Connections

• Converting a discovered website to a target

• Introduction to Predictive Risk Scoring

• Utilizing Predictive Risk Scoring

• API types and specification formats

• Installing Invicti API Security for Acunetix 360 On-Premises

• Updating Invicti API Security for Acunetix 360 On-Premises

• API Discovery Overview for Acunetix 360

• API Discovery sources overview

• Getting Started with Zero Configuration API Discovery for Acunetix 360

• Installing the Invicti Network Traffic Analyzer for Acunetix 360

• Network Traffic Analyzer (NTA): Tap Plugin FAQs

• Integrating with Amazon API Gateway

• Integrating with Apigee API hub

• Integrating with Azure API Management for Acunetix 360

• Integrate with Kong Konnect

• Integrate NTA with Kong overview for Acunetix 360

• Integrate NTA with Kong in Kubernetes for Acunetix 360

• Integrate NTA with Kong in Docker for Acunetix 360

• Integrate NTA with Kong in Linux for Acunetix 360

• Integrate NTA in Docker with NGINX in Docker

• Integrate F5 BIG IP iRule with NTA

• Integrating with MuleSoft Anypoint Exchange (Acunetix 360 On-Demand)

• Integrating with MuleSoft Anypoint Exchange (Acunetix 360 On-Premises)

• Manage API Inventory

• Linking and unlinking discovered APIs to targets

• Scanning APIs overview

• Scanning gRPC API Web Services

• Scanning SOAP API Web Services

• Scanning a RESTful API Web Service

• Scanning a GraphQL API for vulnerabilities

• Importing links and API definitions

• Importing links from supported tools

• Web Application Security Scanning Flow

• Scan production environments

• Stages of Scanning

• Overview of Scanning

• Create a new scan

• Schedule scans

• Best practices for creating effective scan schedules

• Set up incremental scans

• Run official PCI DSS Scans and PCI DSS Group Scans

• Run informal PCI DSS Scans

• Retriev Mend SAST scan results

• Recent scans

• Review scan results and imported vulnerabilities

• View Mend SAST scan results

• View detected technologies

• Check the VDB version in Acunetix 360 On-Premises

• Suspend, pause, and resume scans

• Exclude parts of website from scan

• Configure additional websites

• URL Rewrite Rules

• Pre-Request Scripts

• Use the business logic recorder (BLR)

• Scan Time Window

• Scan Groups

• Factors leading to longer scan times

• Check scan coverage and address any gaps

• Reduce scan times

• Add custom header to scans

• Queued scan failure settings

• Overview of Scan Profiles

• Configure scan profiles

• Security Checks

• WAF Identifier

• GraphQL Library Detection

• Identifying MongoDB injection vulnerabilities

• BREACH Attack

• Forced Browsing

• Login Page Identifier

• Malware Analyzer

• Custom Scripts for Security Checks

• Custom security checks via scripting

• Authentication - Overview

• Form Authentication - Configure and verify

• Form Authentication - Configure with OTP

• Form authentication – Introduction of custom scripts

• Form authentication – Custom script basics and examples

• Form authentication – Create custom scripts

• Form authentication - Custom script fields

• Form authentication - Troubleshooting, tips, and tricks

• Authentication profiles

• Configuring Basic, Digest, NTLM/Kerberos and Negotiate Authentication

• Configuring Client Certificate Authentication

• Configuring OAuth2 Authentication

• Configuring Header Authentication

• Logout detection – Introduction and tips

• Logout detection - Configuration

• Logout detection - Issues

• Scan Scope

• Excluding File Types From a Scan

• Deploying AcuSensor for PHP

• Deploying AcuSensor for PHP – Docker

• Deploying AcuSensor for .NET – Supported Scenarios

• Deploying AcuSensor for .NET in Acunetix 360 On-Demand

• Deploying AcuSensor for .NET in Acunetix 360 On-Premises

• Deploying the AcuSensor agent for .NET Core

• Installing the AcuSensor agent for Java websites – Acunetix 360

• Deploying the Acunetix 360 AcuSensor agent for Java – Tomcat (Windows/Linux/Docker)

• Deploying the Acunetix 360 AcuSensor agent for Java – Docker (Spring Boot)

• Deploying the Acunetix 360 AcuSensor for Java – Windows/Linux (JBOSS 7.4 Standalone + WAR File)

• Deploying Acunetix 360 AcuSensor for Java – Windows/Linux (Jetty 10.0.10 + WAR File)

• Deploying Acunetix 360 AcuSensor for Java – Windows/Linux (Wildfly 26.1.1 Final Standalone + WAR File)

• Deploying Acunetix 360 AcuSensor for Java – Linux (WebSphere Liberty 19.0.0.9+ with WAR file)

• Scanning an application in AWS Elastic Beanstalk (Tomcat + WAR file) – Acunetix 360

• Overview of Reports

• Built-In Reports

• Trend Matrix Report

• Report Templates

• Detailed Scan Report

• Technical Report

• Executive Summary Report

• HIPAA Compliance Report

• ISO 27001 Compliance Report

• DISA STIG Compliance Report

• NIST SP 800-53 Compliance Report

• OWASP API Top Ten 2023 Report

• OWASP API Top Ten 2019 Report

• OWASP Top Ten 2021 Report

• OWASP Top Ten 2017 Report

• OWASP Top Ten 2013 Report

• ASVS 4.0 Compliance Report

• Overview of Official and Informal PCI DSS Compliance Reports

• SANS Top 25 Report

• WASC Threat Classification Report

• Knowledge Base Report

• ModSecurity WAF Rules Report

• F5 BIG-IP ASM WAF Rules Report

• Lists

• Chart Reports

• Editing vulnerabilities and adding security standards

• Troubleshooting Inconsistent Web Security Scan Results

• Exporting the official PCI DSS Compliance Report

• Exporting the informal PCI DSS Compliance Report

• Knowledge Base Nodes

• AcuSensor Node

• AJAX/XML HTTP Node

• Crawling Performance Node

• Viewing the Crawling Performance node

• Cookies Node

• CSS Files Node

• Comments Node

• Email Addresses Node

• Embedded Objects Node

• External CSS Files Node

• External Frames Node

• External Scripts Node

• File Extensions Node

• Form Validation Errors Node

• Google Web Toolkit Node

• Incremental Scan Node

• JavaScript Files Node

• MIME Types Node

• Not Founds Node

• Out of Scope Links Node

• Proofs Node

• REST APIs Node

• Scan Performance Node

• Site Profile Node

• Slowest Pages Node

• Software Composition Analysis (SCA) Node

• SSL Node

• URL Rewrite Node

• Web Pages With Inputs Node

• Web Services (SOAP) Node

• Managing issues

• Viewing issues

• Vulnerability severity levels

• Sending vulnerabilities manually to an issue tracking system

• Assigning an issue to another team member

• Disabling the assigning of issues to the code committer

• Viewing the HTTP request and response of an issue

• Updating the status of an issue

• Tagging in Acunetix 360

• How Acunetix 360 approaches FIPS

• Error messages in scan failures

• Overview of Scan Policies

• Creating a new scan policy

• Scan policy fields

• Scan Policy Editor

• Sharing scan policies

• Scanning single page applications

• Scanning Parameter-Based Navigation Websites

• Scan Policy Optimizer

• Excluding Parameters from a Scan

• Configuring Predefined Web Form Values

• How AcuMonitor Finds Vulnerabilities

• Overview of Report Policies

• Custom Report Policies

• Integrating Acunetix 360 into Your Existing SDLC

• What Systems Does Acunetix 360 Integrate With?

• Integrating Acunetix 360 into Your Vulnerability Management System

• Configuring User Mappings

• Automating scanning with Bitbucket Pipelines

• Managing Integrations

• Integrating Acunetix 360 with an Issue Tracking System

• Integrating Acunetix 360 with Azure Boards

• Integrating Acunetix 360 with Bitbucket

• Integrating Acunetix 360 with Bugzilla

• Integrating Acunetix 360 with DefectDojo

• Integrating Acunetix 360 with FogBugz

• Integrating Acunetix 360 with Freshservice

• Integrating Acunetix 360 with GitHub

• Integrating Acunetix 360 with GitLab Issues (Issue Tracking)

• Integrating Acunetix 360 with Jazz Team Server

• Integrating Acunetix 360 with Jira

• Integrating Acunetix 360 with Kafka

• Integrating Acunetix 360 with Kenna

• Integrating Acunetix 360 with Invicti Standard

• Integrating Acunetix 360 with PagerDuty

• Integrating Acunetix 360 with Pivotal Tracker

• Integrating Acunetix 360 with Redmine

• Integrating Acunetix 360 with ServiceNow Incident Management

• Integrating Acunetix 360 with Shortcut

• Integrating Acunetix 360 with Splunk

• Integrating Acunetix 360 with TFS

• Integrating Acunetix 360 with Unfuddle

• Integrating Acunetix 360 with YouTrack

• Integrating Acunetix 360 with Asana

• Integrating Acunetix 360 with Trello

• Viewing Continuous Integration Information in the Status Window

• Viewing Continuous Integration Information in the Issues Window

• Integrating Acunetix 360 with Azure Pipelines

• Integrating Acuentix 360 with the Bamboo Plugin

• Integrating Acunetix 360 with CircleCI

• Integrating Acunetix 360 with GitLab CI/CD

• Integrating Acunetix 360 with UrbanCode Deploy

• Integrating Acunetix 360 with GitHub Actions

• Integrating Acunetix 360 with Jenkins

• Integrating Acunetix 360 with the TeamCity Plugin

• Integrating Acunetix 360 with Travis CI

• Integrating Acunetix 360 with Mattermost

• Integrating Acunetix 360 with Microsoft Teams

• Integrating Acunetix 360 with Slack

• Integrating Acunetix 360 with HashiCorp Vault

• Integrating Acunetix 360 with CyberArk Vault

• Integrating Acunetix 360 with Azure Key Vault

• Integrating Acunetix 360 with Webhooks

• Integrating Acunetix 360 with Zapier

• SAML Authentication Services

• Configuring Azure Active Directory Integration with SAML

• Configuring Google Single Sign-On Integration with SAML

• Configuring Microsoft Active Directory Federation Services Integration with SAML

• Configuring Okta Single Sign-On Integration with SAML

• Configuring PingFederate Single Sign-On Integration with SAML

• Configuring Pingidentity Single Sign-On Integration with SAML

• Configuring SAML-Based Single Sign-On Integration

• Troubleshooting SSO Issues

• Configuring Azure Active Directory Integration with SCIM in Acunetix 360

• Configuring Okta Integration with SCIM in Acunetix 360

• Integrating Acunetix 360 with ServiceNow Vulnerability Response (Plugin)

• Integrating Acunetix 360 with ServiceNow Vulnerability Response using an integration script

• Integrating Acunetix 360 with ServiceNow Application Vulnerability Response

• Integrating Acunetix 360 with Mend

• Overview of Team Management

• Managing Team Members

• Managing Roles

• Managing Teams

• Activity Logs

• Viewing Your Roles and Teams

• General Settings – User roles and permissions

• Configuring Roles

• Team Administrator capabilities and assigning the role

• Assigning roles to a specific Member

• Assigning roles to a Team

• Custom Team Administrator roles with setup examples

• Configuring LDAP

• Agents in Acunetix 360 On-Premises

• Internal Agents in Acunetix 360

• Installing scan agents on Windows

• Installing scan agents on Linux (Debian Distribution)

• Installing scan agents on Linux (RedHat Distribution)

• Installing scan agents via Docker

• Installing scan agents via Kubernetes and OpenShift

• Disabling and enabling scanner agents

• Encrypting the Agent Token

• Configuring internal agents for secrets management services

• Troubleshooting agent issues

• Malware Analysis with ClamAV in Acunetix 360

• Viewing agent commands and accessing agent logs

• Managing Authentication Verifier Agents

• Installing Authentication Verifier Agents

• Installing Authentication Verifier Agent on Linux (Debian)

• Installing Authentication Verifier Agent on Linux (RedHat)

• Installing Authentication Verifier agents via Docker

• Managing Agent Groups

• Assigning agents to teams

• Overview of Settings

• General Settings

• User roles and permissions

• Data Encryption, Storage, and Retention

• Configuring Login Warning Banner

• Single Sign-On Settings

• IP Restrictions Settings

• Security Settings

• SMS Settings

• Email Settings

• Encryption Settings

• Service Credentials Settings

• Cloud Provider Settings

• Authentication Verifier Settings

• Licensing Settings

• Database Settings

• Configuring custom database maintenance

• Configuring agent selection