Integrating Acunetix with Azure DevOps Services

Integrating Acunetix with Azure DevOps Services is a 4-step process:

  • Prepare a Personal Access Token in Azure DevOps Services for communication with Acunetix
  • Configuring Acunetix for Integration
  • Configuring a Target to Report Issues to your Issue Tracker
  • Submitting Vulnerabilities to Azure DevOps Services

🔍 Integrating Acunetix with Azure DevOps Services - Prerequisites

Before you can successfully integrate Acunetix with Azure DevOps Services, you will need to have completed some preparation beforehand:

  • you should already have a Microsoft account
  • you should already have created a project - typically this would contain the source code for the Target Web Application
  • you should already have your custom work items types created – unless you are satisfied using the default built-in work item types for your work items; the included example assumes that you have created a custom work item type named "Vulnerability"
  • you should already have created an Personal Access Token to secure the communication channel between Acunetix and Azure DevOps Services for your Target's project

Create a Personal Access Token for Acunetix Integration authentication

  • From the "User Settings" menu, click the "Personal access tokens" menu item

  • In the "Personal Access Tokens" page, click the "New Token" button

  • In the "Create a new personal access token" page:
  • set the "Name" field to "Acunetix Integration" – this is only a friendly name to remind you of its use
  • set the "Organization" field to "All accessible organizations" - you may select a narrower definition if you wish to do so
  • set the "Expiration" field to "90 days" - you may select a different expiry (up to one year)
  • set the "Scopes" option to "Full access"
  • click the "Create" button

  • Make sure you keep a copy of the Token - it cannot be retrieved after you exit the page. If you lose the Token, you will need to create a new one and repeat the process.

Configuring Acunetix for Integration

  • In the Acunetix UI, click on "Issue Trackers" in the sidebar
  • Click on the "Add Issue Tracker" button

  • Set the "Name" field to describe the integration – for this example, we have used "Azure DevOps Services Issues"

  • In the "Target Groups Access" panel, select which Target Groups will be assigned to the Issue Tracker; only Targets inside an assigned Target Group can be integrated into this Issue Tracker

  • In the "Proxy Settings" panel, choose which HTTP proxy settings will be used to communicate with this Issue Tracker

  • Select "Azure DevOps Services" from the dropdown labelled "Platform"
  • Set the URL to the format https://dev.azure.com/<organization-name>; this example assumes that your Azure DevOps Service organization was named "kacacunetix"; therefore the URL will be "https://dev.azure.com/kacacunetix"
  • Insert your Azure DevOps Services Personal Access Token into the "Token" field
  • Click on "Test Connection" - you should receive a "Connection is Successful" message; also, the "Project and Issue Type" panel will be updated with your list of Projects and Issue Labels

  • Select the Azure DevOps Services project you want the integration to be linked to – in this example you would be using the pre-created "acunetix-test" project
  • Select the Azure DevOps Services Work Item Type you want Acunetix to create when a vulnerability is found – in this example you would be using the custom type "Vulnerability"

  • If the selected issue type has custom fields defined, you can add the custom fields and assign values to those fields
  • Click the "Save" button at the top of the "Add Issue Tracker" panel

Configuring a Target to Report Issues to your Issue Tracker

From your list of Targets, select the Target you wish to work with.

  • In the Target Information panel, scroll to the bottom of the panel and expand the "Advanced" link.

  • Enable the "Issue Tracker" slider
  • From the "Issue Tracker" dropdown, select the name of the Azure DevOps Services Integration configuration you wish to use
  • At the top of the "Target Information" panel, click the "Save" button

Now that your Target is configured to link to Azure DevOps Services, you need to Scan your Target. When the Scan is completed, you will be able to select the Vulnerabilities to submit to your Issue Tracker.

Submitting Vulnerabilities to Azure DevOps Services

Once you have completed a Scan on your Target:

  • select "Vulnerabilities" in the sidebar

  • adjust your filter to obtain a shortlist containing the vulnerabilities you wish to send to your Issue Tracker
  • use the checkboxes next to vulnerability to select the vulnerabilities to send to the Issue Tracker
  • click the "Send to Issue Tracker" button at the top of the "Vulnerabilities" panel

Check your Azure DevOps Work Items page

Your Azure DevOps Work Items page will show the issues you have submitted to the Issue Tracker:

 

« Back to the Acunetix Support Page