Skip to main content
availability

Package: Invicti AppSec Core (on-demand)

Suppression rules

Use suppression rules to automatically mark vulnerabilities as False Positive, Won't Fix, or Mitigated based on specific conditions you define.

Rule creation and preview​

After you create a suppression rule, you can see the number of vulnerabilities affected by the rule before you click the Save button.

The rule immediately takes effect on existing vulnerabilities after you click the Save button.

For vulnerabilities discovered afterward, Invicti AppSec updates the status of those vulnerabilities every 10 minutes.

Rule deletion behavior​

info

If you delete a preset, Invicti AppSec stops checking for the related suppression rule and any future vulnerabilities aren't affected. However, the status of any vulnerabilities marked by the deleted preset won't revert.

Preset logic​

info

The presets work with an "And" logic, which means if a preset applies to all projects and another preset applies to projects with a specific label, both presets are applied.

Project scope limitations​

caution

You can create only one preset that applies to all projects. Other presets must include a label to indicate which projects are affected.

How suppression rules work​

  1. Define conditions: Set specific criteria to automatically suppress vulnerabilities
  2. Choose status: Select whether to mark as False Positive, Won't Fix, or Mitigated
  3. Preview impact: Review the number of vulnerabilities affected
  4. Apply immediately: Rules take effect on existing vulnerabilities upon saving
  5. Continuous monitoring: Invicti AppSec evaluates new vulnerabilities in each subsequent scan, during the analyzing stage

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Was this page useful?