Exporting a vulnerability to an issue tracking system

This document is for:

Invicti Standard, Invicti Enterprise On-Premises, Invicti Enterprise On-Demand

If you have configured an integration with an issue tracking system, such as Jira, GitHub, or Slack, you can send identified vulnerabilities from Invicti Enterprise or Invicti Standard to that integration. This enables you to streamline the issue-fixing process, saves you time, and eases the developer's life. You can export issues manually and/or automatically.

This document provides instructions for manually sending issues from the Issues and Recent Scans pages in Invicti Enterprise and exporting vulnerabilities from Invicti Standard. For information about automatically sending vulnerabilities after scanning has been completed, refer to Configuring Notifications to Report Vulnerabilities to an Issue Tracking System.

How to export a vulnerability from Invicti Enterprise

There are two ways to manually send issues to integrated issue trackers from Invicti Enterprise: from the Issues page or the Recent Scans page. Refer to the relevant instructions below according to your preferred method.

IMPORTANT: To manually export an issue from the Issues or Recent Scans pages, its status must be Present, Revived, False Positive, or Accepted Risk. Alternatively, the state of the issue must be New, Not Fixed, or Revived. If this condition is not met, the No Action Required information pop-up will appear.

Exporting from the Issues page

Select Issues > All Issues from the left-side menu.
Click the checkbox next to each vulnerability you want to send.
Select Send To, then [Integration].

A pop-up is displayed, with a link to the issue you have sent. If there is an error, this information will be displayed instead.

Exporting from the Recent Scans page

Select Scans > Recent Scans from the left-side menu.
Next to the relevant scan, select Report.
Scroll down to the Technical Report section.
From the list of detected vulnerabilities, select an issue and display its details.
Select Send To, then [Integration].

Once the issue has been imported to your issue tracking system, a notification will appear with a link for the issue number. Click OK to close the notification.

NOTE: You cannot export the same issue more than once.

How to export a vulnerability from Invicti Standard

From the ribbon, select the File tab. Local Scans are displayed.
Double-click the relevant scan to display its results.
In the Issues panel, right-click the vulnerability you want to export and select Send to [Integration].

Alternatively, from the ribbon, select the Vulnerability tab, then Send To [Integration].

A confirmation message and link are displayed at the bottom of the screen.