Mend DAST
Overview
The Mend.io and Invicti integration allows you to retrieve Invicti DAST scan results and view them directly in the Mend AppSec Platform alongside all other findings for SAST, SCA, and Container findings.
To achieve this, you need to integrate Mend.io and Invicti Enterprise by mapping Mend projects to Invicti targets. Once configured, Invicti's DAST scan results will be synchronized and accessible within the Mend AppSec Platform, providing a comprehensive view of application security risks.
This guideline focuses on integrating Invicti’s DAST results into the Mend AppSec Platform. For more information about integrating Mend results into Invicti, please visit our documentation here.
Getting it done
Prerequisites
A Mend account on the AppSec Platform with admin access to your organization's Mend projects and findings.
An active Invicti Enterprise account.
Setting up the Integration
Log into your organization via the Mend Platform.
Navigate to the setting “cog” icon → Integrations:
In the Integrations screen, scroll down to “Scan Engines” and click on Invicti.
You’ll be navigated to the integration set-up screen, where you have to authorize with your Invicti credentials.
Specify your Invicti credentials and choose the Invicti environment you are using.
Note: Invicti DI (Dedicated Instance) environments aren’t currently not supported. Please contact your CSM for more information.
To generate your User ID and Token, log into your Invicti account. Click on your name in the top left corner, then select “API Settings”. From there, you will have the option to generate the User ID and Token.
Once authorization is completed, the integration will then fetch the targets from Invicti.
By default, Mend will create a new Application called “Invicti Integration” and map the source targets from Invicti to a newly created project in the Mend AppSec Platform, using the target name.
Once the Mapping configuration is done, click Next.
Now, the integration will be finishing the setup with Invciti.
Once completed, click Done. Now, you can find the integration available under the “My Integrations” screen.
Edit an Existing Integration
You can modify an existing integration by navigating to the “My Integrations” screen and clicking on the “dast” engine integration you have created.
A pop-up window will show up with the following options:
(1) Add a new mapping
(2) Delete an existing mapping
To add a new mapping, you have to define the connection between Invicti “Source” and the target Mend Application. Then, select the target Project automatically or from the available list.
If you select to delete an existing mapping, a message will confirm that the configuration was deleted successfully.
