availability

Package: Invicti AppSec Core (on-demand)

caution

Activate email integration under Integrations before using the Reports section.

Keep teams informed with scheduled aggregation reports

Keep your teams and project owners informed about their security status without requiring them to log in to Invicti AppSec Core. Aggregation reports deliver a weekly vulnerability summary by email, scoped to a specific team or project. This document explains how to create, view, and manage aggregation reports so the right people always have up-to-date security information without logging in.

Why this matters

When stakeholders don't have regular visibility into vulnerability data, security issues can go unaddressed simply because the right people weren't aware of them. Aggregation reports ensure that team leads and project owners receive a consistent security update on a fixed schedule, so nothing gets missed between manual reviews.

Schedule an aggregation report

1. Select Reports > Aggregation from the left-side menu.
2. Click + Add new report.
3. Enter a descriptive name in the Report name field. The name can't contain spaces.
4. In the Type field, set the scope of the report:
   • Team - use when you want to summarize vulnerability data by team ownership.
   • Project - use when you want to track security status at the project level.
5. In the Tool field, set the delivery method to Email.
6. Use the scope filter to specify which teams or projects to include:
   • If you selected Team, use the Team name field. Select Include to cover only listed teams, or Exclude to cover all teams except the listed ones. Type to search and add teams.
   • If you selected Project, use the Project name field in the same way to filter by project.
7. Enter the recipient's email address in the email field.
8. Set the date and time for the first report delivery in the Start date field.
9. In the Repeat field, set the frequency to Weekly, then enter the number of weeks between deliveries in the field that appears. Enter 1 to send the report every week, 2 to send it every two weeks, and so on.
10. Click Save to create the schedule.

Invicti AppSec generates and sends the first report on the start date you set. After that, the report runs on the weekly interval you configured.

View generated reports and manage your schedules

Select Reports > Aggregation from the left-side menu. The page has two tabs with different purposes:

• Generated reports: lists your active report schedules. Use this tab to create new schedules, edit existing ones, or delete reports you no longer need. To edit a report, click the edit icon on the right side of the entry. To stop future deliveries and remove the report, click the delete icon.
• Schedules: shows individual report deliveries from the last 365 days. Use this tab to confirm whether Invicti AppSec delivered a specific report and when. Reports older than 365 days are no longer listed.

note

To add a new scheduled report, use the + Add new report button on the Generated reports tab. You can't create new schedules from the Schedules tab.

Troubleshooting

A scheduled report email was not received

Verify that the email address in the email field is correct. Verify that the Start date hasn't been set to a future date you haven't reached yet. Also look in your spam or junk folder. If the issue persists, contact your Invicti AppSec administrator.

A required team or project is missing from the filter

You can only select teams and projects you have access to. If a team or project is missing from the filter, ask your Invicti AppSec administrator to verify your role permissions.

---

Need help?

Invicti Support team is ready to provide you with technical help. Go to Help Center