Skip to main content
availability

Package: Invicti AppSec Core (on-demand)

Add by import from CSV

Import a CSV file to register a large batch of web applications or APIs as targets in Invicti AppSec Core in one step, instead of adding each one manually. This document explains how to prepare and upload a CSV file, and how to update target details before saving. To add a smaller batch without a file, refer to Add multiple targets. To add a single target, refer to Add webapp target.

Why this matters​

When you need to onboard dozens or hundreds of targets, entering them one by one or even using the multiple-target form isn't practical. Importing from CSV lets you prepare the full list offline, validate it before upload, and get an entire batch ready to scan in minutes - with no risk of missing a target or mistyping a URL during manual entry.

Import targets from a CSV file​

  1. Select Inventory > Targets from the left-side menu.
  2. Click the down arrow next to Add new target and select Import from CSV. The Import from CSV dialog opens with a column reference on the right.
  3. Create your CSV file using the column structure shown in the dialog, or download the sample file. The file must include the following columns:
    • Name
    • Url
    • Description
    • Team
    • UserName (optional) - simple form authentication username for the target
    • Password (optional) - simple form authentication password for the target
info
  • If a target's name exceeds 40 characters or its description exceeds 255 characters, Invicti AppSec truncates it automatically.
  • URLs must not contain spaces. If a URL has a leading or trailing space, Invicti AppSec removes it automatically. A space embedded inside the URL causes a warning.
  1. Prepare and save the CSV file.
  2. Drag and drop the file into the upload area, or click the upload area to browse and select it.
  3. When the upload completes, the file shows a Complete status. To discard the file and start again, click the bin icon next to it.
  4. Click Done. The dialog closes.
Unencrypted credentials

If your CSV file contains credentials in the UserName and Password columns, a warning appears: "Some of your imported files contain unencrypted credentials. Use a secrets manager where possible and ensure the file is deleted immediately after import." Delete the CSV file from your machine after the import is complete.

  1. The Asset details section populates with data from your CSV file.
  2. To update details for individual targets, use the dropdown menus for each target to set or change the Agent, Environment, and Team. To add Labels, click the down arrow to open the label list and select the labels you want to apply using the checkboxes.
  3. To apply the same settings to multiple targets at once, enable the checkboxes next to the targets you want to update, then click Bulk update. Enable the checkboxes for the columns you want to update, enter the values, then click Update rows.
  4. Click Create targets (n).
  5. The Targets page updates with the imported targets.
warning

Before running your first scan, make sure to read the authorized target scanning policy. You can use Invicti's test websites to explore scanning features without using your own FQDNs or affecting live environments.

Troubleshooting​

The CSV upload fails or shows an error

Check that the file is saved in CSV format and that the column headers match exactly: Name, Url, Description, Team, UserName, Password. Column headers are case-sensitive. Remove any extra columns or formatting before uploading.

A target name or description is shorter than I entered

Invicti AppSec truncates names longer than 40 characters and descriptions longer than 255 characters. Shorten those values in your CSV and re-import.

I can't find a target after importing

Check whether a team filter is active on the targets list - only members of the assigned team can see the target. Clear all active filters and search by target name to locate it.

The "Import from CSV" option isn't visible

You need add permission for targets in Invicti AppSec Core. Contact your Admin to check and update your role permissions.

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Was this page useful?