Integrating with Kong Konnect

This feature is available with Invicti API Security Standalone or Bundle

Integrating Kong Konnect with Acunetix 360 allows you to fetch Swagger2 and OpenAPI3 specification files from Kong Konnect and provide them as inputs to our DAST scanners. The imported specification files are used to build an inventory of API endpoints that can be scanned for vulnerabilities.

This document explains how to set up an integration between Kong Konnect and Acunetix 360.

How to integrate Acunetix 360 with Kong Konnect

Before configuring the integration in Acunetix 360, you need to generate a personal access token in Kong Konnect that will be used to authorize the retrieval of your API specification files. Follow the steps below in all sections to integrate Acunetix 360 with Kong Konnect.

Step 1: Generate a personal access token

1. Log in to Kong Konnect.
2. Click the profile icon in the top-right corner, then select Personal Access Tokens.

3. Click + Generate Token.

4. Enter a Name for the token and set an Expiration period, then click Generate.

5. Click Copy.

You now have the necessary information to configure the integration in Acunetix 360. Continue with the steps in the next section below.

Step 2: Configure Acunetix 360

1. Log in to Acunetix 360.
2. Select APIs > Sources from the left-side menu.

3. Click Add New Source.

4. Enter a Name for the API integration and select Kong Konnect as the Source type. 
5. Select the Region that corresponds with the region used for your Kong Konnect account. (This is visible in the bottom-left corner of the Kong Konnect user interface after selecting API Products.)
6. Paste your Personal Access Token into the corresponding field.

7. Click Authenticate and Save.

An Authorization successful message will display and the integration will appear on the APIs > Sources page in Acunetix 360. Continue with the final step below to synchronize the API import.

Step 3: Synchronize the API import

1. On the APIs > Sources page in Acunetix 360, click the sync icon to start importing your API specification files from Kong Konnect into your Acunetix 360 API Inventory.

2. When the sync is complete, your API specification files will be displayed on the API Inventory page in Acunetix 360. From this page, you can link your API specification files to targets so they can be scanned for vulnerabilities. For more information, refer to Linking and unlinking discovered APIs to targets.

Kong Konnect is now integrated with Acunetix 360. After the initial synchronization, the integration will automatically sync your API specifications once every 24 hours.