Continuous integration overview
You can integrate Invicti DAST into your CI/CD pipelines to automate security testing as part of your software development lifecycle. This enables continuous, proactive detection of vulnerabilities before deployment.
To run agentic pentests from your pipeline, refer to the Integrate agentic pentests in CI/CD document.
CI-driven scans
CI-driven scans allow you to run Invicti DAST directly from a Docker container within your CI/CD workflows. This modern, flexible approach supports scalable, automated security testing with minimal setup.
To use CI-driven scans:
- Configure your Invicti Platform account with API access.
- Pull and execute the Invicti Scan CLI Docker image within your pipeline.
- Supply scan parameters such as target asset, profile, and API token.
Invicti CI/CD integration supports breaking pipelines, viewing results within the pipeline, and downloading reports.
Platform compatibility
This integration is compatible with any CI/CD system that supports Docker, including:
- Azure Pipelines
- GitLab CI/CD
- Jenkins
- CircleCI
Advanced configuration
You can enhance CI-driven scans with:
- Custom scan profiles
- Authentication settings for logged-in scanning
- Conditional logic to fail builds on detected vulnerabilities
- Environment-specific configurations for staging, production, etc.
- Ephemeral agents for scanning internal or non-publicly-accessible targets directly from the CI/CD environment
Refer to integrate CI-driven scans to learn how to set up automated security scanning in your CI/CD workflow.
Need help?
Invicti Support team is ready to provide you with technical help. Go to Help Center