Integrating Invicti Standard with Shortcut

This document is for:
Invicti Standard

Shortcut (formerly Clubhouse) is a project management platform specifically designed for software development. Shortcut helps bring teams of all sizes together to build better products, from project planning to project creation.

This topic explains how to configure Invicti Standard to send a detected vulnerability to Shortcut.

For further information, see Configuring the User Interface for Custom Send To Actions in Invicti Standard and Configuring Auto Send To Actions in Invicti Standard and What Systems Does Invicti Integrate With?.

Shortcut Fields

The table lists and describes the Shortcut fields in the Send To Actions tab.




Select to add an integration.


Select to delete the integration and clear all fields.

Configure Send To

Select to configure the integration using the Settings Wizard instead of doing it manually.

Create Sample Issue

Once all relevant fields have been configured, click to create a sample issue.


This section contains general fields about the Send To Action.

Display Name

This is the name of the configuration that will be shown on menus.


This section contains fields that must be completed.

API Token

The API token.

Project ID

This is the ID of the project to which the issue belongs.

Story Type

This is the issue's story type.

The options are:

  • Feature
  • Chore
  • Bug


This section contains fields with vulnerability details.

Body Template

The template file to be used while rendering issue contents.


The string to be used while formatting the vulnerability title


This section contains optional fields.

Epic ID

This is the epic identifier.

State ID

This is the workflow state identifier that the Story is in.

Requester ID

This the member identifier of the person who requested the issue.

Owner IDs

This is a comma-separated list of member identifiers of those who own the issue.

Follower IDs

This is a comma-separated list of member identifiers of those who follow the issue.

Due Days

This is the number of days between the date the issue was created to the date it’s due.


This is a comma-separated list of labels.

How to Integrate Invicti Standard with Shortcut

  1. Open Invicti Standard.
  2. From the Home tab on the ribbon, select Options > Send To Actions.

  1. From the Add drop-down, select Shortcut.
  2. In the Mandatory section, complete the connection details:
    • API Token
    • Project ID
    • Story Type
  1. In the Vulnerability section, you can specify the Body Template and Title Format.

Body templates are stored in %userprofile%\Documents\Invicti\Resources\Send To Templates. If you use your own custom templates, store them in this location.

  1. In the Optional settings you can specify:
    • Epic ID
    • State ID
    • Requester ID
    • Owner IDs
    • Follower IDs
    • Due Days
    • Labels
  2. Select Create Sample Issue to confirm that Invicti Standard can connect to the configured system and create a sample issue. In the Send To Action dialog, click the Issue number link to open the issue in the default browser.
  3. Select Apply or OK to save the integration.

How to Delete the Shortcut Integration

  1. Open Invicti Standard.
  2. From the Home tab on the ribbon, select Options > Send to Actions.
  3. Select Shortcut.
  4. Select Delete.

How to Export Reported Vulnerabilities to Projects in Shortcut

Please ensure that you have first configured Azure Boards integration. See How to Integrate Invicti Standard with Shortcut.

  1. Open Invicti Standard.
  2. From the ribbon, select the File tab. Local Scans are displayed. Double-click the relevant scan to display its results.
  3. In the Issues panel, right-click the vulnerability and select Send To Shortcut. (Alternatively, from the ribbon, select the Vulnerability tab, then Send To Shortcut.) A confirmation message and link are displayed at the bottom of the screen.

Invicti Help Center

Our Support team is ready to provide you with technical help.

Go to Help Center This will redirect you to the ticketing system.