Prepare for the Invicti Vulnerability Integration

A successful integration requires planning and the execution of pre-integration tasks. Prepare for the integration by performing these tasks. The Invicti Vulnerability Integration assumes that you are familiar with the Invicti product and API.

The Common Weakness Enumeration (CWE) integration is also used by Application Vulnerability Response and should be running prior to installing and configuring the Invicti Vulnerability Integration.

注:

NIST Vulnerability Database (NVD) data is not necessary to install the integration, however it provides vulnerability enrichment and is useful.

For information on NVD, see Importing data with the NVD and CWE integrations and managing third-party libraries.

There is a configured run-as user for each integration record. The default value for this user is VR.System. Do not change this value.

注:

Before running the integration, make any necessary configuration change based on your requirements.

Validate your instance sizing based on the number of application vulnerable items you expect to import. An undersized instance can lead to long load times. If you do not know the size of your instance, contact Customer Service and Support. The admin role is required to install and configure applications on your ServiceNow AI Platform instance.

Obtain your API credentials and API token on your Invicti console. Review the information available on the Invicti product website at API Overview.