August 2022 replace for Invicti Enterprise On-Demand

We’re excited to share the August 2022 Replace for Invicti Enterprise On-Demand. The highlights of this launch are Enterprise Logic Recorder, Azure Key Vault, and improved notification scope.

Enterprise Logic Logger

Invicti has launched the Enterprise Logic Recorder (BLR) that can assist you maximize scan protection and detect vulnerabilities even in web site and software parts that may solely be accessed by way of particular enterprise logic flows.

The BLR works by registering any customized or complicated enterprise logic in each your goal internet functions and your multi-step types with a number of validation guidelines. The crawler then makes use of these recordings to find extra pages, types, and endpoints as a part of the scan.

For extra info, see our help web page on utilizing Enterprise Logic Recorder.

Azure key retailer

Because the zero-trust strategy continues to realize recognition, we wish to be sure to have loads of choices to guard your secrets and techniques. That is why we’re introducing integration with one other secrets and techniques administration service: Azure Key Vault.

Azure Key Vault is a cloud service that permits you to securely retailer and entry your secrets and techniques. Azure protects these secrets and techniques utilizing trade normal algorithms, key lengths, and {hardware} safety modules.

By integrating Invicti Enterprise with Azure Key Vault, you’ll be able to run authenticated scans in your internet functions, web sites, and APIs with out having to enter or trade delicate credentials.

For extra info, see our help web page on Invicti Enterprise integration with Azure Key Vault.

Improved notification vary

You may create notifications in Invicti Enterprise to remain knowledgeable about began or failed scans and recognized points. Nevertheless, for these notifications to ship the data on the time your group wants, you might want to be certain the correct messages attain the correct individuals. We’re happy to announce enhancements to the methods you’ll be able to outline web site scope and person scope for notifications. This enhanced performance permits you to outline notification recipients for particular web sites and teams of internet sites.

Notification scope additionally performs a crucial function in integration endpoints, significantly two-way integrations like Jira. For instance, if you wish to create a notification for the mixing, it’s essential to choose any person. Equally, if any web site Y any person is chosen, notifications might be despatched for all web sites within the account, no matter whether or not the person has entry to that web site.

For extra info, see our help web page on creating notifications.

For an entire record of what is new, enhancements, and fixes on this replace, see the Invicti Enterprise Changelog.