Contact Support


Deploying Invicti Shark agent for Java websites

Invicti Shark enables you to carry out interactive security testing (IAST) in your web application in order to confirm more vulnerabilities and further minimize false positives. For Invicti Shark to operate, you need to download an agent and deploy it on your server. Please note that this agent is generated uniquely for each target website for security reasons.

This topic explains how to download and install Invicti Shark to a Java web application for different configurations.

Invicti Shark for Java requires Tomcat (7+) and Java (1.7+). Current testing is with Tomcat 9 and Java 1.8.

There are many possible configurations for a JAVA web server. The following sections look at the more common web server configuration possibilities.

Use one of the following links for more details on how to deploy Invicti Shark for Java on your web application.


Highly accurate, fast & easy-to-use Web Application Security Scanner

Get a demo