Acunetix Support

• Introduction to Acunetix

• Acunetix Overview

• Licensing in Acunetix

• Data retention and data availability for expired licenses

• Navigation in Acunetix

• Registration and Evaluation of Acunetix Online

• Activating Acunetix Online

• Logging in to Acunetix

• Whitelisting requirements for Acunetix Online – US region: https://app.invicti.com

• Whitelisting requirements for Acunetix Online – EU region: https://app-eu.invicti.com

• Whitelisting requirements for Acunetix On-Premises

• Resetting the master password

• Introduction to Discovery

• Getting Started with Discovery

• Adjusting Discovery Settings, Inclusions, and Exclusions

• Target creation from Web Asset Discovery

• Introduction to Predictive Risk Scoring

• Utilizing Predictive Risk Scoring

• Configuring Targets

• Adding proxy server settings

• Scanning restricted areas (Site Login)

• Converting Selenium Scripts to Acunetix LSR Files

• Enabling AcuSensor

• Adding PKCS #11 smart card login functionality to your targets

• Deploying AcuSensor for PHP

• Deploying AcuSensor for PHP - Docker

• Deploying AcuSensor for PHP - AWS Elastic Beanstalk

• Deploying AcuSensor for .NET - Supported Scenarios

• Deploying AcuSensor for ASP .NET

• Deploying AcuSensor for ASP .NET Core

• Deploying AcuSensor for .NET - AWS Elastic Beanstalk

• Installing the AcuSensor Agent for Java websites

• Deploying the AcuSensor Agent for Java - Tomcat (Windows/Linux/Docker)

• Deploying the AcuSensor Agent for Java - Docker (Spring Boot)

• Deploying AcuSensor for Java - Windows/Linux (JBOSS 7.4 Standalone + WAR File)

• Deploying AcuSensor for Java - Windows/Linux (Jetty 10.0.10 + WAR File)

• Deploying AcuSensor for Java - Windows/Linux (Wildfly 26.1.1 Final Standalone + WAR File)

• Deploying AcuSensor for JAVA – Linux (WebSphere Liberty 19.0.0.9+ with WAR file)

• Scanning an Application in AWS Elastic Beanstalk (Tomcat + WAR File)

• Deploying AcuSensor for Node.js

• Deploying AcuSensor for Node.js - Docker

• Deploying AcuSensor for Node.js - AWS Elastic Beanstalk

• API types and specification formats

• Accessing the API documentation

• API Discovery Overview

• Introduction to API Discovery Sources

• Getting Started with Zero Configuration API Discovery

• Installing the Invicti Network Traffic Analyzer

• Network Traffic Analyzer: Tap Plugin FAQs

• Integrating with Amazon API Gateway

• Integrating with Apigee API hub

• Integrating with Azure API Management

• Integrating with Kong Konnect

• Integrating with MuleSoft Anypoint Exchange (Acunetix Online)

• Integrating with MuleSoft Anypoint Exchange (Acunetix On-Premises)

• Managing your API Inventory

• Linking and unlinking discovered APIs to targets

• Overview of scanning APIs

• Scanning REST APIs for vulnerabilities

• Scanning SOAP APIs for vulnerabilities

• Scanning GraphQL APIs for vulnerabilities

• Scanning authenticated APIs

• Launching a new scan

• Instant scans

• Future scans

• Recurrent scans

• Incremental scans

• Continuous scanning

• Malware scanning

• Scanning authenticated web assets

• Configuring auto-login

• Recording a login sequence

• Configuring form authentication with OTP

• Configuring OAuth 2.0 authentication

• Interacting with a scan in progress

• Reviewing scan results

• Runtime SCA Findings

• Reducing scan times

• Scan statuses

• Checking scan coverage and addressing any gaps

• Scans, Preflight checks, and Network errors

• Changing the maximum duration of a scan (Acunetix On-Premises)

• Enabling logging for a scan

• Scan data retention and scan archiving

• How Acunetix approaches FIPS

• Installing internal agents on Windows

• Installing internal agents using Docker

• Installing internal agents with proxy settings

• Introduction to the Acunetix standalone Login Sequence Recorder

• Installing the Acunetix standalone Login Sequence Recorder

• Recording a login sequence with the Acunetix standalone LSR

• Editing an LSR file with the Acunetix standalone LSR

• Using a login sequence with an internal target

• LSR errors

• Configuring General Settings

• Email Settings

• Proxy Settings

• Configuring Network Scanning

• Editing the Acunetix settings.xml file

• Single Sign-On Settings

• Configuring Microsoft Active Directory Federation Services Integration with SAML

• Configuring Microsoft Entra ID (Azure Active Directory) Integration with SAML

• Configuring Google Single Sign-On Integration with SAML

• Configuring Okta Single Sign-On Integration with SAML

• Configuring SAML-based Single Sign-On Integration

• Configuring OneLogin Secure Single Sign-On Integration with SAML

• Configuring Ping Identity Single Sign-On Integration with SAML

• What is Acunetix 360?

• Comparison between Acunetix 360 On-Demand and Acunetix 360 On-Premises

• Acunetix 360 licensing

• Data retention and data availability for expired licenses

• Licensing FAQs

• Before using Acunetix 360

• Glossary

• Logging in to Acunetix 360

• Whitelisting requirements for Acunetix 360 On-Demand

• Navigation in Acunetix 360

• Quick Start Guide for Acunetix 360

• Introduction to the Dashboards

• Global Dashboard

• Using filters in Acunetix 360

• Excluding Acunetix 360 files from antivirus scans

• Downloading Invicti Standard from Acunetix 360

• Whitelisting requirements for Acunetix 360 On-Premises

• Step 1: Components, architecture, prerequisites, and download

• Step 2: Installing and configuring the web app server and AV service

• Step 3: Installing the Acunetix 360 Agent

• Step 4: Installing the Authentication Verifier Agent

• Step 5: Installing the Acunetix 360 Bridge

• Configuring a proxy for the Acunetix 360 Web Application

• Security Hardening for Acunetix 360 On-Premises

• Migrating Data in Acunetix 360 On-Premises

• Excluding Acunetix 360 files from antivirus scans

• Updating Acunetix 360 On-Premises

• Configuring Acunetix 360 for Amazon Web Services

• Configuring Acunetix 360 for Linux on Amazon Web Services (Ubuntu)

• Installing Acunetix 360 On-Premises in Silent Mode

• Installing AcuMonitor Internally

• The Discovery Service - Introduction

• Configuring the Discovery Service

• Managing the Discovered Websites List

• Configuring AWS Connections

• Converting a discovered website to a target

• Introduction to Predictive Risk Scoring

• Utilizing Predictive Risk Scoring

• API types and specification formats

• Installing Invicti API Security for Acunetix 360 On-Premises

• Updating Invicti API Security for Acunetix 360 On-Premises

• API Discovery Overview

• Introduction to API Discovery Sources

• Getting Started with Zero Configuration API Discovery

• Installing the Invicti Network Traffic Analyzer

• Network Traffic Analyzer: Tap Plugin FAQs

• Integrating with Amazon API Gateway

• Integrating with Apigee API hub

• Integrating with Azure API Management

• Integrating with Kong Konnect

• Integrating with MuleSoft Anypoint Exchange (Acunetix 360 On-Demand)

• Integrating with MuleSoft Anypoint Exchange (Acunetix 360 On-Premises)

• Managing your API Inventory

• Linking and unlinking discovered APIs to targets

• Overview of Scanning APIs

• Scanning gRPC API Web Services

• Scanning SOAP API Web Services

• Scanning a RESTful API Web Service

• Scanning a GraphQL API for vulnerabilities

• Importing links and API definitions

• Importing links from supported tools

• Web Application Security Scanning Flow

• Scanning Production Environments

• Stages of Scanning

• Overview of Scanning

• Creating a new scan

• Scheduling scans

• Best practices for creating effective scan schedules

• Setting up incremental scans

• Running official PCI DSS Scans and PCI DSS Group Scans

• Running informal PCI DSS Compliance Scans

• Retrieving Mend SAST scan results

• Recent Scans

• Reviewing Scan Results and Imported Vulnerabilities

• Viewing Mend SAST scan results in Acunetix 360

• Viewing detected technologies

• Checking the VDB version in Acunetix 360 On-Premises

• Suspending, pausing, and resuming scans

• Excluding Parts of a Website from a Scan

• Configuring Additional Websites

• URL Rewrite Rules

• Pre-Request Scripts

• Using the business logic recorder

• Scan Time Window

• Scan Groups

• Factors leading to longer scan times

• Checking scan coverage and addressing any gaps

• Reducing scan times

• Overview of Scan Profiles

• Configuring scan profiles

• Security Checks

• WAF Identifier

• GraphQL Library Detection

• Identifying MongoDB injection vulnerabilities

• BREACH Attack

• Forced Browsing

• Login Page Identifier

• Malware Analyzer

• Custom Scripts for Security Checks

• Custom security checks via scripting

• Overview of Authentication

• Configuring and Verifying Form Authentication

• Configuring Form Authentication with OTP

• Custom Scripts for Form Authentication

• Form authentication troubleshooting

• Authentication Profiles

• Configuring Basic, Digest, NTLM/Kerberos and Negotiate Authentication

• Configuring Client Certificate Authentication

• Configuring OAuth2 Authentication

• Configuring Header Authentication

• Logout Problems

• Logout Detection

• Scan Scope

• Excluding File Types From a Scan

• Deploying AcuSensor for PHP

• Deploying AcuSensor for PHP – Docker

• Deploying AcuSensor for .NET – Supported Scenarios

• Deploying AcuSensor for .NET in Acunetix 360 On-Demand

• Deploying AcuSensor for .NET in Acunetix 360 On-Premises

• Deploying the AcuSensor agent for .NET Core

• Installing the AcuSensor agent for Java websites – Acunetix 360

• Deploying the Acunetix 360 AcuSensor agent for Java – Tomcat (Windows/Linux/Docker)

• Deploying the Acunetix 360 AcuSensor agent for Java – Docker (Spring Boot)

• Deploying the Acunetix 360 AcuSensor for Java – Windows/Linux (JBOSS 7.4 Standalone + WAR File)

• Deploying Acunetix 360 AcuSensor for Java – Windows/Linux (Jetty 10.0.10 + WAR File)

• Deploying Acunetix 360 AcuSensor for Java – Windows/Linux (Wildfly 26.1.1 Final Standalone + WAR File)

• Deploying Acunetix 360 AcuSensor for Java – Linux (WebSphere Liberty 19.0.0.9+ with WAR file)

• Scanning an application in AWS Elastic Beanstalk (Tomcat + WAR file) – Acunetix 360

• Overview of Reports

• Built-In Reports

• Trend Matrix Report

• Report Templates

• Detailed Scan Report

• Technical Report

• Executive Summary Report

• HIPAA Compliance Report

• ISO 27001 Compliance Report

• DISA STIG Compliance Report

• NIST SP 800-53 Compliance Report

• OWASP Top Ten 2021 Report

• OWASP API Top Ten 2019 Report

• OWASP Top Ten 2017 Report

• OWASP Top Ten 2013 Report

• ASVS 4.0 Compliance Report

• Overview of Official and Informal PCI DSS Compliance Reports

• SANS Top 25 Report

• WASC Threat Classification Report

• Knowledge Base Report

• ModSecurity WAF Rules Report

• F5 BIG-IP ASM WAF Rules Report

• Lists

• Chart Reports

• Editing vulnerabilities and adding security standards

• Troubleshooting Inconsistent Web Security Scan Results

• Exporting the official PCI DSS Compliance Report

• Exporting the informal PCI DSS Compliance Report

• Knowledge Base Nodes

• AcuSensor Node

• AJAX/XML HTTP Node

• Crawling Performance Node

• Viewing the Crawling Performance node

• Cookies Node

• CSS Files Node

• Comments Node

• Email Addresses Node

• Embedded Objects Node

• External CSS Files Node

• External Frames Node

• External Scripts Node

• File Extensions Node

• Form Validation Errors Node

• Google Web Toolkit Node

• Incremental Scan Node

• JavaScript Files Node

• MIME Types Node

• Not Founds Node

• Out of Scope Links Node

• Proofs Node

• REST APIs Node

• Scan Performance Node

• Site Profile Node

• Slowest Pages Node

• Software Composition Analysis (SCA) Node

• SSL Node

• URL Rewrite Node

• Web Pages With Inputs Node

• Web Services (SOAP) Node

• Managing issues

• Viewing issues

• Vulnerability severity levels

• Sending vulnerabilities manually to an issue tracking system

• Assigning an issue to another team member

• Disabling the assigning of issues to the code committer

• Viewing the HTTP request and response of an issue

• Updating the status of an issue

• Tagging in Acunetix 360

• How Acunetix 360 approaches FIPS

• Error messages in scan failures

• Overview of Scan Policies

• Creating a new scan policy

• Scan policy fields

• Scan Policy Editor

• Sharing scan policies

• Scanning single page applications

• Scanning Parameter-Based Navigation Websites

• Scan Policy Optimizer

• Excluding Parameters from a Scan

• Configuring Predefined Web Form Values

• How AcuMonitor Finds Vulnerabilities

• Overview of Report Policies

• Custom Report Policies

• Integrating Acunetix 360 into Your Existing SDLC

• What Systems Does Acunetix 360 Integrate With?

• Integrating Acunetix 360 into Your Vulnerability Management System

• Configuring User Mappings

• Automating scanning with Bitbucket Pipelines

• Managing Integrations

• Integrating Acunetix 360 with an Issue Tracking System

• Integrating Acunetix 360 with Azure Boards

• Integrating Acunetix 360 with Bitbucket

• Integrating Acunetix 360 with Bugzilla

• Integrating Acunetix 360 with DefectDojo

• Integrating Acunetix 360 with FogBugz

• Integrating Acunetix 360 with Freshservice

• Integrating Acunetix 360 with GitHub

• Integrating Acunetix 360 with GitLab Issues (Issue Tracking)

• Integrating Acunetix 360 with Jazz Team Server

• Integrating Acunetix 360 with Jira

• Integrating Acunetix 360 with Kafka

• Integrating Acunetix 360 with Kenna

• Integrating Acunetix 360 with Invicti Standard

• Integrating Acunetix 360 with PagerDuty

• Integrating Acunetix 360 with Pivotal Tracker

• Integrating Acunetix 360 with Redmine

• Integrating Acunetix 360 with ServiceNow Incident Management

• Integrating Acunetix 360 with Shortcut

• Integrating Acunetix 360 with Splunk

• Integrating Acunetix 360 with TFS

• Integrating Acunetix 360 with Unfuddle

• Integrating Acunetix 360 with YouTrack

• Integrating Acunetix 360 with Asana

• Integrating Acunetix 360 with Trello

• Viewing Continuous Integration Information in the Status Window

• Viewing Continuous Integration Information in the Issues Window

• Integrating Acunetix 360 with Azure Pipelines

• Integrating Acuentix 360 with the Bamboo Plugin

• Integrating Acunetix 360 with CircleCI

• Integrating Acunetix 360 with GitLab CI/CD

• Integrating Acunetix 360 with UrbanCode Deploy

• Integrating Acunetix 360 with GitHub Actions

• Integrating Acunetix 360 with Jenkins

• Integrating Acunetix 360 with the TeamCity Plugin

• Integrating Acunetix 360 with Travis CI

• Integrating Acunetix 360 with Mattermost

• Integrating Acunetix 360 with Microsoft Teams

• Integrating Acunetix 360 with Slack

• Integrating Acunetix 360 with HashiCorp Vault

• Integrating Acunetix 360 with CyberArk Vault

• Integrating Acunetix 360 with Azure Key Vault

• Integrating Acunetix 360 with Webhooks

• Integrating Acunetix 360 with Zapier

• SAML Authentication Services

• Configuring Azure Active Directory Integration with SAML

• Configuring Google Single Sign-On Integration with SAML

• Configuring Microsoft Active Directory Federation Services Integration with SAML

• Configuring Okta Single Sign-On Integration with SAML

• Configuring PingFederate Single Sign-On Integration with SAML

• Configuring Pingidentity Single Sign-On Integration with SAML

• Configuring SAML-Based Single Sign-On Integration

• Troubleshooting SSO Issues

• Configuring Azure Active Directory Integration with SCIM in Acunetix 360

• Configuring Okta Integration with SCIM in Acunetix 360

• Integrating Acunetix 360 with ServiceNow Vulnerability Response (Plugin)

• Integrating Acunetix 360 with ServiceNow Vulnerability Response using an integration script

• Integrating Acunetix 360 with ServiceNow Application Vulnerability Response

• Integrating Acunetix 360 with Mend

• Overview of Team Management

• Managing Team Members

• Managing Roles

• Managing Teams

• Activity Logs

• Viewing Your Roles and Teams

• General Settings – User roles and permissions

• Configuring Roles

• Team Administrator capabilities and assigning the role

• Assigning roles to a specific Member

• Assigning roles to a Team

• Custom Team Administrator roles with setup examples

• Configuring LDAP

• Agents in Acunetix 360 On-Premises

• Internal Agents in Acunetix 360

• Installing scan agents on Windows

• Installing scan agents on Linux (Debian Distribution)

• Installing scan agents on Linux (RedHat Distribution)

• Installing scan agents via Docker

• Installing scan agents via Kubernetes and OpenShift

• Disabling and enabling scanner agents

• Encrypting the Agent Token

• Configuring internal agents for secrets management services

• Troubleshooting agent issues

• Malware Analysis with ClamAV in Acunetix 360

• Viewing agent commands and accessing agent logs

• Managing Authentication Verifier Agents

• Installing Authentication Verifier Agents

• Installing Authentication Verifier Agent on Linux (Debian)

• Installing Authentication Verifier Agent on Linux (RedHat)

• Managing Agent Groups

• Assigning agents to teams

• Overview of Settings

• General Settings

• User roles and permissions

• Data Encryption, Storage, and Retention

• Configuring Login Warning Banner

• Single Sign-On Settings

• IP Restrictions Settings

• Security Settings

• SMS Settings

• Email Settings

• Encryption Settings

• Service Credentials Settings

• Cloud Provider Settings

• Authentication Verifier Settings

• Licensing Settings

• Database Settings

• Configuring custom database maintenance

• Configuring agent selection