# InsightAppSec **URL:** https://discuss.rapid7.com/c/insightappsec/14.md [Latest](https://discuss.rapid7.com/latest.md) · [Categories](https://discuss.rapid7.com/categories.md) · [Tags](https://discuss.rapid7.com/tags.md) --- ## [About the InsightAppSec category](https://discuss.rapid7.com/t/about-the-insightappsec-category/1095)
**Author:** [@rapid7\_bot](https://discuss.rapid7.com/u/rapid7_bot)\ **Replies:** 0\ **Last updated:** [June 5, 2020, 9:59pm UTC](https://discuss.rapid7.com/t/about-the-insightappsec-category/1095 "2020-06-05T21:59:55Z")
The place for topics surrounding InsightAppSec, including the InsightAppSec API, integrations, and its CI/CD capabilities. --- ## [InsightAppSec](https://discuss.rapid7.com/t/insightappsec/57424)
**Author:** [@sndziba](https://discuss.rapid7.com/u/sndziba)\ **Replies:** 0\ **Last updated:** [September 1, 2026, 7:14am UTC](https://discuss.rapid7.com/t/insightappsec/57424 "2026-09-01T07:14:37Z")
What is the cause of the website scan to fail (Failed Network Unavailable)? --- ## [How do i locate cloud scan engine IP address?](https://discuss.rapid7.com/t/how-do-i-locate-cloud-scan-engine-ip-address/57324)
**Author:** [@rsingleton](https://discuss.rapid7.com/u/rsingleton)\ **Replies:** 2\ **Last updated:** [July 22, 2026, 9:57am UTC](https://discuss.rapid7.com/t/how-do-i-locate-cloud-scan-engine-ip-address/57324 "2026-07-22T09:57:06Z")
How do I find the IP Address to my Cloud Scan Engine? --- ## [Scan Config: Invalid WSDL File](https://discuss.rapid7.com/t/scan-config-invalid-wsdl-file/57030)
**Author:** [@mbaker1](https://discuss.rapid7.com/u/mbaker1)\ **Replies:** 0\ **Last updated:** [January 9, 2026, 7:46pm UTC](https://discuss.rapid7.com/t/scan-config-invalid-wsdl-file/57030 "2026-01-09T19:46:55Z")
When attempting to add a WSDL file to a scan config in Rapid7, the following error is shown: Encountered error when parsing uploaded file request Invalid WSDL file: class org.ow2.easywsdl.schema.DefaultSchemaImpl canno… --- ## [I’m unable to modify the HTML for the domain](https://discuss.rapid7.com/t/i-m-unable-to-modify-the-html-for-the-domain/52230)
**Author:** [@rprasad](https://discuss.rapid7.com/u/rprasad)\ **Replies:** 0\ **Last updated:** [June 17, 2025, 11:46am UTC](https://discuss.rapid7.com/t/i-m-unable-to-modify-the-html-for-the-domain/52230 "2025-06-17T11:46:12Z")
I’m unable to modify the HTML for the domain halo-dev-mvno.console.amdocs-dbs.com, and cannot complete the meta tag verification. Could you please assist with a manual domain validation method (DNS, HTTP file, or email)? … --- ## [Azure integration is free or paid](https://discuss.rapid7.com/t/azure-integration-is-free-or-paid/41891)
**Author:** [@psingh8](https://discuss.rapid7.com/u/psingh8)\ **Replies:** 1\ **Last updated:** [May 29, 2025, 8:50pm UTC](https://discuss.rapid7.com/t/azure-integration-is-free-or-paid/41891 "2025-05-29T20:50:29Z")
I wanted to use for scan during build or release . is it free or paid ? if paid then how much --- ## [Get full HTTP Traffic in vulnerability view](https://discuss.rapid7.com/t/get-full-http-traffic-in-vulnerability-view/48316)
**Author:** [@bferon](https://discuss.rapid7.com/u/bferon)\ **Replies:** 0\ **Last updated:** [February 20, 2025, 7:29am UTC](https://discuss.rapid7.com/t/get-full-http-traffic-in-vulnerability-view/48316 "2025-02-20T07:29:56Z")
Hello, Is there a way to show the full HTTP Traffic in the vulnerability panel ? Currently I have to copy each value individually using the copy button, paste into a separate text editor to be able to compare attack val… --- ## [Umlaut in Domain Names](https://discuss.rapid7.com/t/umlaut-in-domain-names/47103)
**Author:** [@cgebhardt](https://discuss.rapid7.com/u/cgebhardt)\ **Replies:** 0\ **Last updated:** [January 21, 2025, 4:49pm UTC](https://discuss.rapid7.com/t/umlaut-in-domain-names/47103 "2025-01-21T16:49:17Z")
I can’t scan Apps with an umlaut (“Ü”) in the domain name. Is this a known limitation? Thanks in advance! --- ## [InsightAppsec and Jira Cloud Integration](https://discuss.rapid7.com/t/insightappsec-and-jira-cloud-integration/40574)
**Author:** [@adhulipudi](https://discuss.rapid7.com/u/adhulipudi)\ **Replies:** 1\ **Last updated:** [August 20, 2024, 7:39pm UTC](https://discuss.rapid7.com/t/insightappsec-and-jira-cloud-integration/40574 "2024-08-20T19:39:09Z")
I have problem in Jira Cloud and InsightAppsec integration, User credentials are saved successfully post that Jira Project key information is not listing on the “Project information”. Does anyone faced the similar issue… --- ## [InsightAppSec Site authentication failure](https://discuss.rapid7.com/t/insightappsec-site-authentication-failure/37952)
**Author:** [@mmoustafa](https://discuss.rapid7.com/u/mmoustafa)\ **Replies:** 2\ **Last updated:** [August 20, 2024, 12:28pm UTC](https://discuss.rapid7.com/t/insightappsec-site-authentication-failure/37952 "2024-08-20T12:28:06Z")
Dear Support Team, We used a trial for Rapid7 DAST InsightAppSec to test and buy the tool if it works with us .We configure our scan for webapp with site automated authentication type and verify the login and it was suc… --- ## [Extracting Scan Config Urls via API](https://discuss.rapid7.com/t/extracting-scan-config-urls-via-api/29283)
**Author:** [@libiyode](https://discuss.rapid7.com/u/libiyode)\ **Replies:** 1\ **Last updated:** [August 20, 2024, 12:21pm UTC](https://discuss.rapid7.com/t/extracting-scan-config-urls-via-api/29283 "2024-08-20T12:21:24Z")
Is it possible to extract urls from scan configuration via the AppSec api. Use Case: I would to extract Scan Config URLs by making a call to the Rapid7 appsec API I have looked at the documentation at InsightAppSec A… --- ## [Does InsightAppsec include HTTP Security Headers Check?](https://discuss.rapid7.com/t/does-insightappsec-include-http-security-headers-check/28237)
**Author:** [@nowel](https://discuss.rapid7.com/u/nowel)\ **Replies:** 1\ **Last updated:** [August 20, 2024, 12:11pm UTC](https://discuss.rapid7.com/t/does-insightappsec-include-http-security-headers-check/28237 "2024-08-20T12:11:55Z")
Hi, Does anyone know if InsightAppsec includes HTTP Security Headers Check? Say, for example, check if the Referrer and Permission policy has been implemented. Thanks! --- ## [InsightAppSec Scanner fails to start Windows 2022 Server - On Prem](https://discuss.rapid7.com/t/insightappsec-scanner-fails-to-start-windows-2022-server-on-prem/39305)
**Author:** [@mweb1](https://discuss.rapid7.com/u/mweb1)\ **Replies:** 0\ **Last updated:** [July 2, 2024, 4:16am UTC](https://discuss.rapid7.com/t/insightappsec-scanner-fails-to-start-windows-2022-server-on-prem/39305 "2024-07-02T04:16:49Z")
Howdy all, we are in the process of getting our Rapid7 platforms established, and one of the things we needed to do was to install the AppSecScan engine on Prem so we can scan internal web applications. We have done thi… --- ## [Integrate Rapid7 InsightAppSec Scan for GitLab CI/CD](https://discuss.rapid7.com/t/integrate-rapid7-insightappsec-scan-for-gitlab-ci-cd/37784)
**Author:** [@hiradukunda](https://discuss.rapid7.com/u/hiradukunda)\ **Replies:** 1\ **Last updated:** [May 28, 2024, 4:14pm UTC](https://discuss.rapid7.com/t/integrate-rapid7-insightappsec-scan-for-gitlab-ci-cd/37784 "2024-05-28T16:14:47Z")
I have a question: Does the CI/CD InsightAppSec Scan only touch pushed data, or does it get triggered by push action and scan the whole repository? --- ## [InsightAppSec API Examples](https://discuss.rapid7.com/t/insightappsec-api-examples/58)
**Author:** [@holly\_wilsey](https://discuss.rapid7.com/u/holly_wilsey)\ **Replies:** 2\ **Last updated:** [May 15, 2024, 1:19pm UTC](https://discuss.rapid7.com/t/insightappsec-api-examples/58 "2024-05-15T13:19:40Z")
For those who are eager for a deeper dive into the InsightAppSec API, we’ve got a brand new InsightAppSec API Examples project that we wanted to share. The project is a public repo that’s full of lots of good stuff for e… --- ## [insightAppSec Syslog?](https://discuss.rapid7.com/t/insightappsec-syslog/35504)
**Author:** [@tcarrocera](https://discuss.rapid7.com/u/tcarrocera)\ **Replies:** 0\ **Last updated:** [April 4, 2024, 2:31pm UTC](https://discuss.rapid7.com/t/insightappsec-syslog/35504 "2024-04-04T14:31:29Z")
HI there, I would like to know if it is possible to send syslog from insightAppSec to our SIEM. I have not been able to find any documentation on it. I am looking for: 1- How to setup syslog forwarding? 2- What event… --- ## [InsightAppSec Reports with Filters](https://discuss.rapid7.com/t/insightappsec-reports-with-filters/34437)
**Author:** [@lthompson](https://discuss.rapid7.com/u/lthompson)\ **Replies:** 0\ **Last updated:** [March 11, 2024, 1:30pm UTC](https://discuss.rapid7.com/t/insightappsec-reports-with-filters/34437 "2024-03-11T13:30:49Z")
PDF/HTML reports should show the filter that was applied when the report was generated. Currently there is just an orange warning box: “Displaying 3 of 50 vulnerabilities. 431 ignored and/or filtered vulnerabilities we… --- ## [Authenication with InsightAppSec API Key](https://discuss.rapid7.com/t/authenication-with-insightappsec-api-key/33458)
**Author:** [@dsharma3](https://discuss.rapid7.com/u/dsharma3)\ **Replies:** 0\ **Last updated:** [February 16, 2024, 9:46pm UTC](https://discuss.rapid7.com/t/authenication-with-insightappsec-api-key/33458 "2024-02-16T21:46:54Z")
Hello, I am trying to automate connection to InsightAppSec with API key and the API key is not authenticating me. Response url keeps coming back as Login. I do have permissions to login and access the apps. Not doing m… --- ## [Installed with the "latest" engine, still displayed as an outdated version](https://discuss.rapid7.com/t/installed-with-the-latest-engine-still-displayed-as-an-outdated-version/29528)
**Author:** [@weltodx\_weltodx](https://discuss.rapid7.com/u/weltodx_weltodx)\ **Replies:** 3\ **Last updated:** [November 14, 2023, 8:32pm UTC](https://discuss.rapid7.com/t/installed-with-the-latest-engine-still-displayed-as-an-outdated-version/29528 "2023-11-14T20:32:30Z")
I received notification yesterday via email from R7 appsec engines are no longer usable, and must be installed with a newer engine for on prem engines. I followed the instructions and download a new engine installer. I… --- ## [Action Required: Reinstall for Host Machine](https://discuss.rapid7.com/t/action-required-reinstall-for-host-machine/29522)
**Author:** [@rgetteau1](https://discuss.rapid7.com/u/rgetteau1)\ **Replies:** 2\ **Last updated:** [November 13, 2023, 6:46pm UTC](https://discuss.rapid7.com/t/action-required-reinstall-for-host-machine/29522 "2023-11-13T18:46:19Z")
I got the email for this yesterday. When I went to do the reinstall, it looks like the version of the InsightAppSec engine that downloads from the deploy new engine link is the same version as the one from the last “you… --- ## [Insight AppSec Vulnerabilities Reports in CSV Format](https://discuss.rapid7.com/t/insight-appsec-vulnerabilities-reports-in-csv-format/7557)
**Author:** [@manny\_singh](https://discuss.rapid7.com/u/manny_singh)\ **Replies:** 7\ **Last updated:** [November 8, 2023, 3:55pm UTC](https://discuss.rapid7.com/t/insight-appsec-vulnerabilities-reports-in-csv-format/7557 "2023-11-08T15:55:31Z")
Hi Community Team , Would it be possible to create a CSV Report from Appsec to include the following : App URL Attack Type Module Type Vulnerability Information Description References Recommendation CVSS Score … --- ## [Reducing false positives in Insight AppSec](https://discuss.rapid7.com/t/reducing-false-positives-in-insight-appsec/27917)
**Author:** [@mmohammed.faruq](https://discuss.rapid7.com/u/mmohammed.faruq)\ **Replies:** 0\ **Last updated:** [September 27, 2023, 4:03pm UTC](https://discuss.rapid7.com/t/reducing-false-positives-in-insight-appsec/27917 "2023-09-27T16:03:52Z")
Hi Everyone, Can anyone share how they are reducing the amount of false positives they see in insight appsec please? Thanks in advance --- ## [Preventing IAS from sending a specific parameter in the body of a POST](https://discuss.rapid7.com/t/preventing-ias-from-sending-a-specific-parameter-in-the-body-of-a-post/27485)
**Author:** [@gford](https://discuss.rapid7.com/u/gford)\ **Replies:** 0\ **Last updated:** [September 15, 2023, 4:30am UTC](https://discuss.rapid7.com/t/preventing-ias-from-sending-a-specific-parameter-in-the-body-of-a-post/27485 "2023-09-15T04:30:56Z")
I’m scanning a site. It has a EULA popup, which - if rejected - results in a parameter appearing in future POST requests which triggers a logoff. I would like for this parameter to never be sent. InsightAppSec has many a… --- ## [Insight AppSec - how are others tracking SLAs?](https://discuss.rapid7.com/t/insight-appsec-how-are-others-tracking-slas/26129)
**Author:** [@mmohammed.faruq](https://discuss.rapid7.com/u/mmohammed.faruq)\ **Replies:** 1\ **Last updated:** [September 5, 2023, 2:35pm UTC](https://discuss.rapid7.com/t/insight-appsec-how-are-others-tracking-slas/26129 "2023-09-05T14:35:15Z")
hi Everyone, Wanted to check how others are tracking SLAs for vulnerabilities found by Insight AppSec. In InsightVM I use the Goals and SLAs feature but this isn’t available in AppSec. The only way I can think of atm is… --- ## [Crawl map not getting generated](https://discuss.rapid7.com/t/crawl-map-not-getting-generated/25130)
**Author:** [@amohamed1](https://discuss.rapid7.com/u/amohamed1)\ **Replies:** 0\ **Last updated:** [July 12, 2023, 1:33pm UTC](https://discuss.rapid7.com/t/crawl-map-not-getting-generated/25130 "2023-07-12T13:33:23Z")
Our scans stopped generating crawl maps and we seeing the below message when we navigate to the crawl map tab: 65 Links Crawled The scan crawled 65 links but no crawl map was generated. We have even tried creating bra… --- ## [Swagger template file for appsec scanning](https://discuss.rapid7.com/t/swagger-template-file-for-appsec-scanning/12860)
**Author:** [@ceberiel](https://discuss.rapid7.com/u/ceberiel)\ **Replies:** 3\ **Last updated:** [June 8, 2023, 4:16pm UTC](https://discuss.rapid7.com/t/swagger-template-file-for-appsec-scanning/12860 "2023-06-08T16:16:52Z")
Looking to test some custom API’s using AppSec but scan keeps failing with "Ill-formed Swagger file " error. Been playing around with my json file but can’t seem to get it right. Anyone have one that works that I can … --- ## [APP url with Port Numner](https://discuss.rapid7.com/t/app-url-with-port-numner/23225)
**Author:** [@kkanchan](https://discuss.rapid7.com/u/kkanchan)\ **Replies:** 0\ **Last updated:** [May 19, 2023, 7:38am UTC](https://discuss.rapid7.com/t/app-url-with-port-numner/23225 "2023-05-19T07:38:54Z")
I have url to be scanned with port 8443 for.example https://test.com:8443 but not not possible. Am I missing anything? --- ## [Service accounts vs individual test accounts](https://discuss.rapid7.com/t/service-accounts-vs-individual-test-accounts/22292)
**Author:** [@mmohammed.faruq](https://discuss.rapid7.com/u/mmohammed.faruq)\ **Replies:** 2\ **Last updated:** [May 4, 2023, 11:30am UTC](https://discuss.rapid7.com/t/service-accounts-vs-individual-test-accounts/22292 "2023-05-04T11:30:38Z")
Hi everyone, New to appsec. Curious to know how people have set up their test accounts for scan configs. One service/test account to allow insightappsec to login and run scans across multiple apps. OR Individual te… --- ## [Search by CVE](https://discuss.rapid7.com/t/search-by-cve/16409)
**Author:** [@MrJ](https://discuss.rapid7.com/u/MrJ)\ **Replies:** 0\ **Last updated:** [October 21, 2022, 9:30pm UTC](https://discuss.rapid7.com/t/search-by-cve/16409 "2022-10-21T21:30:53Z")
Hello, I noticed in the filter here is no option to search by CVE? Does Rapid 7 assign a UUID to CVE’s and if not how does one try to track down a specific CVE? Thank you, --- ## [Is there a way to update swagger file in a Scan Config via API?](https://discuss.rapid7.com/t/is-there-a-way-to-update-swagger-file-in-a-scan-config-via-api/15513)
**Author:** [@john\_baughman](https://discuss.rapid7.com/u/john_baughman)\ **Replies:** 0\ **Last updated:** [September 22, 2022, 7:55pm UTC](https://discuss.rapid7.com/t/is-there-a-way-to-update-swagger-file-in-a-scan-config-via-api/15513 "2022-09-22T19:55:57Z")
Looking through the API docs for InsightAppSec, there doesn’t seem to be functionality to update a swagger file in the scan config, can someone point me in the right direction? Did I miss this section of the documentatio… [Next page](https://discuss.rapid7.com/c/insightappsec/14.md?page=1)