HackEDU has launched an integration with HCL AppScan which allows your organization to automatically use the vulnerabilities found in your security scans to build dynamic training plans for your developers.
Follow the steps below to setup your integration.
Prerequisites
You must be both a HackEDU and HCL AppScan customer.
Generate an HCL AppScan API Key
Login to HCL AppScan
Open the menu and click settings
3. Click Generate to create a new Key ID and Secret. Once you leave this page, you will no longer be able to view the Secret.
Setup Integration in HackEDU Admin Dashboard
Login to HackEDU with an Admin account, and go to your Admin Dashboard.
Click Settings > Data Integrations in the left menu
Click Add Integration
4. Select HCL AppScan from our list of Integrations
5. Chose whether to apply these vulnerabilities to your entire organization or just to specific teams.
Note: You can click here to see what data we have access to and what we save by continuing with the integration. You can read about HackEDU's security and data policies here.
6. Enter your AppScan Key ID and Secret for the integration, and click Continue.
7. If you have multiple AppScan applications, you will be prompted to select which you would like to apply to the integration.
8. Confirm the details of your integration and click Finish.
9. Your integration will automatically begin to sync, and will re-sync once a day. You can click on the integration to see the data we've synced, and to open the original AppScan reports.
Setting up adaptive training plans
Now that you have vulnerability data available, you must setup an Adaptive Training Plan to use take advantage of it for your training.