Whitelisting requirements for Acunetix Online - US region: https://app.invicti.com
To ensure the proper functioning of cloud agents and integrations, configure inbound and outbound traffic rules to allow access to the URLs in this document. Correctly configuring network access is a prerequisite for successful and accurate scans of your targets.
These are the whitelisting configuration steps to consider:
- Outbound connections
- Your browser outbound connections
- Acunetix Online internal scanning agent outbound connections
- AcuSensor outbound connections
- Inbound connections
Outbound connections
Your browser outbound connections
Your browser might be behind an outbound firewall or web proxy, especially when connected to a corporate LAN or VPN. Ensure that your firewall, proxy, or VPN allows outbound connections to the Acunetix Online URL for your location.
Scope | Destination |
Browser access to Acunetix Online | https://app.invicti.com |
Acunetix Online internal scanning agent outbound connections
If you have deployed an internal scanning agent, ensure your network infrastructure permits it to establish outbound connections to the following destinations:
Scope | Destination |
API calls to Acunetix Online | https://app.invicti.com |
API calls to the AcuMonitor service for out-of-band vulnerability checking | https://bxss.me |
API calls to the safe browsing service | https://sb.bxss.me |
API calls to the software composition analysis service | https://sca.acunetix.com |
AcuMonitor S3 bucket for out-of-band vulnerability checking | https://bxss.s3.dualstack.us-west-2.amazonaws.com |
Downloading of update packages for the internal scanning agent & used by cloud and internal agents to send scan data into private S3 buckets | https://*.amazonaws.com |
API calls to the AcuSensor Bridge | https://acusensor.acunetix.com |
Scanning requests to your target | IP Address/URL for your target, including destination port |
AcuSensor outbound connections
If you have deployed an AcuSensor agent in your target web application, ensure your network infrastructure permits it to establish outbound connections for API calls to the AcuSensor Bridge URL for your location.
Scope | Destination |
API Calls to the AcuSensor Bridge | https://acusensor.acunetix.com |
Inbound connections
Your target accepting inbound connections
Ensure your target’s network infrastructure allows incoming scanning requests from:
Scope | Source |
Incoming scanning requests | scanners-us.invicti.com scanners-us-dr.invicti.com |
Incoming scanning requests | IP Address / URL of your Internal Scanning Agent(s) |
Your integration server accepting inbound connections
Ensure your integration server's network infrastructure allows incoming connections for integration API calls.
Scope | Source |
Integration API calls | 44.209.247.130 54.88.118.56 44.241.41.88 52.88.130.73 |
IMPORTANT: If you have a dedicated environment, ensure access to the environment accordingly. |
