Package: Invicti AppSec Core (on-demand)
Edit or delete a target
This document explains how to update a target's configuration as ownership, priorities, or organizational structure change - and how to permanently remove a target once it's no longer in scope.
Why this matters
Target metadata drives a lot of downstream behavior in Invicti AppSec Core: the assigned team receives the target's vulnerability notifications, business criticality feeds risk prioritization, and labels power filtering across the platform. When this metadata drifts out of date, the wrong people get paged and dashboards mis-prioritize work. Retiring targets you no longer scan keeps the Targets list focused on assets that still matter.
Keep target ownership and metadata accurate
The target URL and protocol can't be changed after creation. To scan a different URL, add a new webapp target instead.
To reassign ownership or update target metadata:
- Select Inventory > Targets from the left-side menu.
- Click the target you want to update.
- On the target's page, click the pencil icon next to the target name to open the Target info dialog.
- Modify the available fields:
- Name: update the target's display name.
- Team: reassign the target to a different team.
- Business criticality: change the business impact level or switch to Calculate automatically.
- Labels: add or remove custom labels for categorization and filtering.
- Click Save to apply your changes.
For detailed descriptions of these fields and their configuration options, see Add webapp target.
Retire a target you no longer scan
Deleting a target is permanent and can't be undone. All associated scan history, vulnerability data, and configuration are removed.
To retire a target permanently:
- Select Inventory > Targets from the left-side menu.
- Locate the target you want to delete.
- Click the delete (trash bin) icon on the target card or the row hamburger menu.
- In the confirmation dialog, type the required confirmation text to proceed.
- Click Delete to permanently remove the target.
Troubleshooting
The pencil or trash icon isn't visible
You need edit or delete permission for targets in Invicti AppSec Core to make these changes. Contact your Admin to check and update your role permissions.
URL and protocol fields are grayed out in the edit dialog
This is by design. URL and protocol are locked after a target is created. To scan a different URL, add a new webapp target instead.
The Delete button stays disabled in the confirmation dialog
The confirmation text must match exactly, including casing. Re-type the required text and the Delete button activates.
Need help?
Invicti Support team is ready to provide you with technical help. Go to Help Center