availability

Package: Invicti AppSec Core (on-demand)

Add multiple targets

Register several web applications or APIs as targets in a single step so you can start scanning them without repeating the process for each one. This document explains how to add multiple targets at once in Invicti AppSec Core. To add a single target, refer to Add webapp target. To import a large batch from a file, refer to Add by import from CSV.

Why this matters

Adding targets one by one is practical for small batches, but when you need to onboard many applications quickly - for example at the start of a new program or after a product launch - repeating the process individually is slow and prone to inconsistency. Adding multiple targets in one step means your whole batch is ready to scan at the same time, with the same settings applied across all of them.

Add multiple targets

1. Select Inventory > Targets from the left-side menu.
2. Click the down arrow next to Add new target and select Add multiple targets.
3. Enter the Name and URL for each target you want to add. You can enter multiple entries, each on a new line. URLs must not contain spaces - Invicti AppSec removes any leading or trailing spaces automatically, but a space embedded in the URL causes a warning.
4. Choose the Agent that matches where your targets are hosted:
   • Invicti Cloud agent (default) - Invicti's managed cloud-based agent, suitable for scanning publicly accessible applications. No setup required.
   • Custom agents - agents you've already configured for scanning internal or restricted environments. Select one if your targets aren't accessible from the public internet.
5. Select the Environment to assign the targets to (for example, Development, Staging, or Production) so findings are organized by context.
6. Select the Team responsible for these targets' security.
7. Add Labels (optional) to help categorize and filter the targets. Click the down arrow to open the label list and select the labels you want to apply using the checkboxes.
8. Click Create targets.

warning

Before running your first scan, make sure to read the authorized target scanning policy. You can use Invicti's test websites to explore scanning features without using your own FQDNs or affecting live environments.

9. The Targets page updates with your new targets.

tip

Once your targets are set up, you can run your first scan.

Troubleshooting

A URL triggers a warning about spaces

URLs must not contain whitespace. Check each URL and remove any spaces. Invicti AppSec strips leading and trailing spaces automatically, but a space embedded inside the URL itself isn't valid and blocks the entry.

The "Add multiple targets" option isn't visible

You need add permission for targets in Invicti AppSec Core. Contact your Admin to check and update your role permissions.

I can't find a target after creating it

Check whether a team filter is active on the targets list - only members of the assigned team can see the target. Clear all active filters and search by target name to locate it.

---

Need help?

Invicti Support team is ready to provide you with technical help. Go to Help Center