Integrating Acunetix 360 with an issue-tracking system

Integrating Acunetix 360 with an issue-tracking system means that you can have vulnerabilities identified during a web application security scan automatically created as issues in your issue-tracking system. This type of integration is called Endpoint Integration.

Integrations, regardless of the issue-tracking system used, are configured in Acunetix 360. Refer to What Systems Does Acunetix 360 Integrate With? document for information on supported issue-tracking systems.

Alternatively, you can send issues manually to an issue-tracking system.

This document explains how to create a new integration of Acunetix 360 and your issue-tracking system.

Configure endpoint integration

In this example, for the purposes of illustration, we integrate Acunetix 360 with Jira.

How to integrate Acunetix 360 with an issue-tracking system

• Select Integrations > New Integration from the left-side menu.
• Click on Jira to open a configuration window.
• Complete the connection details:

• Name: the name of the integration.
• URL: the URL that must be specified as the domain name.
• Username or Email: use username or email address for login.
• Access Token or Password: the access token (API) or the password of the user.

• Click Load Jira Details to continue the configuration.
• Fill in the Project Configuration fields:

• Choose your project from the Project Key drop-down.
• From the Issue Type drop-down, choose the issue type.
• Title Format: the string used to create the issue title. Leave it as it is or type your title format including {0}.
• Template: choose a template type for the issue description: Standard or Detailed which displays additional information such as Request and Response detail.

• Click Create Sample Issue to test the integration. A confirmation message is displayed to confirm a successful issue creation.
• After clicking Save you are taken to the Manage Integrations page where you can see the integration.

Prevent reopening tickets in issue trackers

When the option “Do not re-open issues marked as False Positive or Accepted Risk” is enabled and the vulnerabilities previously marked as False Positive or Accepted Risk are revived during scans, the system doesn’t reopen the issues in the integrated Issue Tracker. This option is disabled by default.

How to enable the option in your issue tracker

• Select Integrations > Manage Integrations from the left-side menu.
• Click Edit next to your issue tracker integration.
• Navigate to Webhook Settings.
• Enable the Do not re-open issues marked as False Positive or Accepted Risk checkbox.

• Click Save to close the settings.