Skip to main content
availability

Package: Invicti AppSec Core (on-demand)

Create assets from website discovery

Invicti AppSec Core's Website discovery service automatically identifies web assets associated with your organization. Once URLs appear in the discovery list, you can convert them into targets for vulnerability scanning.

This document explains how to add single or multiple URLs from the Website discovery page to your Targets list.

Why this matters​

Website discovery automatically surfaces web assets associated with your organization - including ones you may not have been aware of. Converting discovered URLs into targets lets you close visibility gaps and ensures your full attack surface is covered without having to manually track down and enter each URL.

Prerequisites​

  • Your organization has the Invicti AppSec Core package.
  • At least one URL has been discovered and appears in the Website discovery list.

Add a single target from the discovery list​

  1. Select Discovery > Website discovery from the left-side menu.
  2. Enable the checkbox next to the URL you want to convert to a target for scanning.
  3. Click Add targets to open the target creation form.
  4. Complete the form:
    • Name (required): enter a descriptive name for the target.
    • URL (required): pre-filled from the discovery list.
    • Agent (optional): select the agent to use for scanning.
    • Environment (optional): select the environment.
    • Team (optional): assign the target to a team.
    • Business Impact (optional): set the business impact level.
    • Labels (optional): add labels to help categorize the target.
  5. Click Create Target.

Add multiple targets from the discovery list​

  1. Select Discovery > Website discovery from the left-side menu.
  2. Enable the checkboxes next to each URL you want to convert to targets for scanning.
  3. Click Add targets to open the bulk target creation page.
  4. For each target in the list, complete the row:
    • Name (required): enter a descriptive name for the target.
    • URL: pre-filled from the discovery list.
    • Environment (optional): select the environment.
    • Team (required): assign the target to a team.
    • Labels (optional): add labels to help categorize the target.
  5. Click Add targets.
Authorization requirement

By adding targets you're agreeing that you have the necessary authorization to scan them. For more information, see Authorized target scanning policy.

Your selected URLs now appear on the Targets page, ready for scanning.

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Was this page useful?