Open

You will learn

About Netsparker Enterprise Remote Provider and its permissions, formats, and scan orchestration.

Prerequisites

Audience: IT Professional, or End User
Difficulty: Basic
Time needed: Approximately 5 minutes
Tools required: N/A

For general information & instructions on the use of Remote Providers within ThreadFix, please refer to the Remote Providers parent page. For information on REST API functionality for Remote Providers, please refer to the following: Remote Providers API

Introduction

Netsparker Enterprise Import and track Netsparker DAST results and merge DAST and SAST scan results with the ThreadFix Netsparker integration.

Permission

The Netsparker Enterprise user account integrating with ThreadFix must be granted the following permissions, in addition to having API Access enabled:

• Manage Websites

• View Reports

Open

Remote Provider Configuration

When setting up the Remote Provider integration in ThreadFix, you’ll need to use https://www.netsparkercloud.com/api/1.0 as the URL.

Manual Uploads Date Formats

For manual uploads, the scan date will be the date the xml report was generated. The accepted date formats are:

• dd/mm/yyyy 

• yyyy-mm-dd

If the scan date for the report does not match either format, the date used will be the date the scan was uploaded to ThreadFix. 

Scan Orchestration

ThreadFix supports scan orchestration via the UI for Netsparker Enterprise. In order to use the Scan Orchestration feature the ThreadFix user must have “Manage Remote Provider Scans” permission. After having configured the Remote Provider and mapped it to a ThreadFix application, click the Request button to initiate a scan, after which users can click the Import button to import the result.

Another method to initiate a scan orchestration is to click the Scan Orchestration (rocket) button within the Remove Provider Application tab as seen below.

This page will be updated at a future time with more details on the Remote Provider integration with this specific scanning tool.

Table of Contents