> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/ox-integrations/3rd-party-integrations/dynamic-app-security/invicti-platform.md).

# Invicti Platform

You can connect OX to your Invicti Platform tenant to import Dynamic Application Security Testing (DAST) results.

This lets you view Invicti Platform findings alongside your other security findings in the OX platform.

Invicti Platform is the unified Invicti application security offering. OX reads its DAST findings through the Platform API, maps them to your applications, and presents them in one place for triage, prioritization, and reporting.

## Terminology mapping

Invicti Platform and OX use different labels for similar concepts. Use this map while you work.

| Invicti Platform          | OX Security  |
| ------------------------- | ------------ |
| Targets                   | Applications |
| Findings, Vulnerabilities | Issues       |
| Scans                     | Scans        |
| Severity                  | Severity     |

## Prerequisites

* **Invicti Platform account:** An account that can open **User settings** and generate an API key.
* **OX permissions:** Permission to configure connectors.

## Step 1: Get an Invicti Platform API key

Invicti Platform authenticates API requests with a personal API key generated from your user settings.

1. Sign in to **Invicti Platform**.
2. Select your initials in the upper-right corner, then select **User settings**.
3. Select **API key**.
4. Select **Generate new API key**.
5. Select **Copy** and store the key in a secure location. You cannot view it again after you leave the page.

> **Important:** Invicti Platform is served from regional hosts. Note the host you sign in to, for example:
>
> * `https://app.invicti.com`
> * `https://platform-eu.invicti.com`
>
> You enter this host in OX in Step 2.

## Step 2: Connect Invicti Platform to OX

1. In the OX platform, go to **Connectors**.
2. In the search box, enter **Invicti**. The Invicti connector appears under **Dynamic App Security**.
3. Select the **Invicti** card to open the credentials dialog.

<figure><img src="/files/8q3YK94RvT75eqnFQ50b" alt="" width="563"><figcaption></figcaption></figure>

4. On the **User Name & Password** tab, provide the following details.

| Field         | Value                                                                                                                     |
| ------------- | ------------------------------------------------------------------------------------------------------------------------- |
| **Host URL**  | The base URL of your Invicti Platform tenant, for example `https://app.invicti.com` or `https://platform-eu.invicti.com`. |
| **User Name** | Your Invicti Platform user name.                                                                                          |
| **Password**  | The API key you generated in Step 1.                                                                                      |

5. Select **Connect**.
6. To choose which Invicti targets OX imports, select the **gear** icon next to **Delete**, select the targets you want, then select **Save**.

> **Note:** The gear icon becomes active after the connection succeeds. Select it to limit the import to specific Invicti targets.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ox.security/ox-integrations/3rd-party-integrations/dynamic-app-security/invicti-platform.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.