Acunetix

Record your Acunetix connection as vulnerability scanning evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In Acunetix:

   1. Log in to Acunetix.
   2. Click [Your Name] in the top left corner of the page and select Profile from the drop-down menu.
   3. Scroll down to the API Key section and click Generate new api key.
   4. Click Show to display the new API key, or Copy to copy it.

   Where to find the other values:

   • Base URL (optional): The address of your Acunetix installation including the port, with /api/v1 (Acunetix's example is https://127.0.0.1:3443/api/v1; replace the host with your installation's address).

   The API key is sent in the X-Auth header. The fetched docs do not say whether the key can be shown again after generation, and do not cover read-only users or roles. Acunetix is now branded Invicti Web + API.

   Source: acunetix.com, acunetix.com, checked 2026-10-07.

2. On Compliance › Connectors, open Acunetix, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Frameworks

Acunetix publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.

These tests are switched on per workspace by the Safeguard team.

Related

• Vulnerability Scanning connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks