Skip to main content

IAST upgrade guide

When upgrading to Invicti Platform, existing IAST (Interactive Application Security Testing) configurations are migrated with one important dependency:

  • while the IAST token is migrated, deployed sensors must be updated to communicate with the Invicti Platform Bridge URL.

This document explains what is migrated, what must be updated, and what to plan for going forward.

What is carried over​

  • The IAST token is carried over automatically as part of the upgrade.
  • No action is required to recreate or regenerate the token.

Required post-upgrade action - sensor updates​

  • Although the token is carried over, IAST sensors deployed in applications are still configured with the Invicti Enterprise Bridge URL.

After upgrading to Invicti Platform:

  • Existing sensors won't communicate correctly until the Bridge URL is updated.
  • Each deployed sensor must be reconfigured to use the Invicti Platform Bridge URL.

Why this is required​

IAST sensors communicate directly with the Bridge endpoint. Because the Bridge endpoint changes when upgrading to Invicti Platform, sensors must explicitly point to the new URL.

How to update IAST sensors​

Customers should follow the official documentation when updating their sensors:

These references include:

  • Correct Bridge URLs.
  • Network allowlisting/trustlisting requirements.
  • Platform-specific configuration steps.

Important future change - Bridge URL model​

Invicti Platform is moving toward a "one Bridge per region" model.

As part of this improvement:

  • Bridge URLs will be consolidated on a regional basis.
  • All IAST sensors will eventually need to be updated to align with this new model.

Customers should plan for a future sensor update when this change is introduced.

After upgrading to Invicti Platform:

  • Confirm the IAST token is present in the platform.
  • Identify all deployed IAST sensors.
  • Update each sensor to use the Invicti Platform Bridge URL.
  • Review trustlisting/allowlisting requirements.
  • Verify IAST data ingestion after updating sensors.

Summary​

  • IAST token is carried over automatically during the upgrade.
  • Sensors must be updated to point to the Invicti Platform Bridge URL.
  • Trustlisting requirements should be reviewed.
  • A future Bridge URL consolidation will require another sensor update.

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Last updated on
Was this page useful?