AI-Enhanced Attack Modules

You can use AI in Application Security (InsightAppSec) to help prevent false positives from appearing in your scan results. This is achieved using the attack modules and attack templates in your scan configuration. The false positives flagged by AI are excluded from your scan results, so you can save time manually reviewing vulnerabilities that have no impact on your business.

Requirements

To use this feature you must:

• Have the View and Change Attack Templates user permission in Application Security (InsightAppSec). For more information, read Role-Based Access Control .
• Use a cloud-based scan engine. On-premise scan engines do not support this feature.

Enable AI-enhanced attack modules

Enabling AI-enhanced attack modules will affect all future and scheduled scans the attack module is configured on. Note that exceptionally large scans may have varied results due to their size.

To enable AI-enhanced attack modules in your scan configuration:

1. Go to Settings > Scan Options > AI Settings and click Manage AI Features for your organization.
2. Enable the AI Vulnerability Pre-Triage feature toggle. A confirmation modal will appear.
   1. Optionally, click the check box to enable applicable AI Attack Modules by default. This will automatically turn on any new AI pre-triage capabilities for applicable attack modules as they become available.
   2. Click Turn On.
3. Click Manage Attack Templates.
4. Select an attack template you wish to enable AI pre-triage for.
5. Go to the attack modules tab.
6. Enable AI Pre-Triage toggle for the applicable attack module.
7. Click Save.

Turn off AI-enhanced attack modules

You may want to turn off AI-enhanced attack modules to measure the effectiveness of false positive reduction or for auditing purposes.

You can turn off AI-enhanced attack modules at the organization level or per a single scan configuration. Turning off the AI-enhanced attack module will affect future and scheduled scans.