AI-Enhanced Attack Modules

You can use AI in Application Security (InsightAppSec) to help prevent false positives from appearing in your scan results. This is achieved using the attack modules and attack templates in your scan configuration. The false positives flagged by AI are excluded from your scan results, so you can save time manually reviewing vulnerabilities that have no impact on your business.

Requirements

To use this feature you must:

• Have the View and Change Attack Templates user permission in Application Security (InsightAppSec). For more information, read Role-Based Access Control .
• Use a cloud-based scan engine. On-premise scan engines do not support this feature.

Enable AI-enhanced attack modules

Enabling AI-enhanced attack modules affects all future and scheduled scans the attack module is configured on. Note that exceptionally large scans may have varied results due to their size.

To enable AI-enhanced attack modules in your scan configuration:

1. From Command Home, go to Administration > Application Security Settings > Scan Options > AI Settings and select Manage AI Features for your organization.
2. Turn on AI Vulnerability Pre-Triage. A confirmation modal appears.
   1. Optionally, select Enable applicable AI Attack Modules by default. This automatically turns on any new AI pre-triage capabilities for applicable attack modules as they become available.
   2. Select Turn On.
3. Select Manage Attack Templates.
4. Select an attack template you want to enable AI pre-triage for.
5. Select the Active Attack Modules tab.
6. Turn on AI Enhanced next to as many attack modules as necessary.
7. Select Save and Exit.

Turn off AI-enhanced attack modules

You may want to turn off AI-enhanced attack modules to measure the effectiveness of false positive reduction or for auditing purposes.

You can turn off AI-enhanced attack modules at the organization level or per a single scan configuration. Turning off the AI-enhanced attack module affects future and scheduled scans.