--- title: Rapid7 AppSpider Connector Guide slug: rbvm-help/rapid7-appspider-connector-guide createdAt: 2026-10-26T13:51:23.587Z --- **Summary**: How to set up and use the Rapid7 AppSpider connector in Ivanti Neurons. ## Overview The RiskSense platform provides an API-based connector that integrates with **Rapid7’s AppSpider Enterprise** that enables customers to bring their **AppSpider** findings into RiskSense to gain visibility of their overall risk due to vulnerabilities in their applications, thereby enabling a more simplified and efficient way to manage those vulnerabilities. RiskSense users can configure the connector to pull scan data from **AppSpider** on a periodic basis. Data from **AppSpider** is ingested as Applications/Application Findings. ### AppSpider Enterprise Overview AppSpider Enterprise is a single console that includes multiple AppSpider Pro scan engines. It is an on-premises installation that manages scan configurations and schedules from a centralized location. It includes unique capabilities and integrations that enable teams to automate more of the security testing program across the entire software development lifecycle (SDLC), from creation through production. ## AppSpider Enterprise Connector Setup Prerequisites - Connector setup in Ivanti Neurons requires the on-premises installation of AppSpider Enterprise. - Perform scans for the desired applications. - The AppSpider Enterprise connector pulls these files based on the schedule defined during configuration and processes the data, categorizing them into Applications and Application Findings. - Since AppSpider Enterprise is an on-premises installation, an OVA setup is required to connect with the Ivanti Neurons platform. Refer to [this knowledge base article](docId:-An1hjNOHVfM105DeuKVm) for more details. ### User Access and Permissions To set up the connector, the user account must have API access to AppSpider Enterprise. The credentials used for creating a connector can be either a multi-client or normal user; RiskSense handles both scenarios. In a multi-client user’s case, the RiskSense connector will pull all scan files associated with multiple clients and process them, as well. ### AppSpider Enterprise Role Permissions The user account associated with the connector must have the following Roles enabled for the connector to pull scan reports from AppSpider Enterprise: - Report viewer - Scan runner - Issues viewer - Issues manager ### Fetching the API Token Expiry from AppSpider Enterprise When configuring the connector in Ivanti Neurons, you will need the API token expiry from AppSpider Enterprise. The API token expiry can be retrieved from the IIS Manager configuration file where AppSpider Enterprise is installed. This is custom to each user, and it can be retrieved by following these steps: - In the AppSpider Enterprise machine (where it is installed): - Go to the following File Path: C:\Program Files (x86)\Rapid 7\AppSpider Enterprise 3.8\NET\Web.config - Open the file in a text editor and locate the following line of code: \\ \ By default, the timeout is set to 15 minutes. You can change it as needed. For example, change it to 120 for a 2-hour timeout. Save the file and restart IIS for the change to take effect. ### Creating the AppSpider Enterprise Connector Navigate to the **Automate > Integrations** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/N6T9UnB5FOanUDKWj7uEe_palo-alto-xpanse-expander.png" alt="Navigation - Automation - Integrations" position="flex-start" size="33" width="229" height="151" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" showCaption="false"} Using the search bar in the upper-right corner of the **Integrations** page, type **AppSpider Enterprise** to find the connector. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/p4NnvjB21LlH09Jne4E2e_rapid7-appspider-connector.png" alt="AppSpider Connector - Search for AppSpider Connector" position="flex-start" size="73" width="511" height="134" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector.png" showCaption="false"} Locate the **AppSpider Enterprise **card on the page and click **Configuration**. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/XVX32afnUf-dcQZ6ycoOB_rapid7-appspider-connector1.png" alt="AppSpider Connector - Configuration Button Location" position="flex-start" size="61" width="424" height="451" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_1.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_1.png" showCaption="false"} Complete the following fields. These fields include: - **Name**: Connector name. - **URL**: Add theAppSpider Enterprise on-premises Instance URL with the port and context path, e.g., https\://\/\. Refer to the screenshot below for another example. - **User Name and Password**: AppSpider Enterprise user name and password with the [roles provided from the previous section](docId\:nfmDIHeCGGBYs-Fj1O8ff). - **Network**: Network name in Ivanti Neurons. Ingested data will be associated with this network. - **SSL**: For self-signed domains, add the SSL certificate. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/sXujocSjLwUKbX8mYb46m_rapid7-appspider-connector2.png" alt="AppSpider Connector - Connection Window" position="flex-start" size="78" width="547" height="575" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_2.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_2.png" showCaption="false"} Once the fields are complete, click **Test Credentials** to verify the credentials are correct and can connect to the AppSpider Enterprise instance. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/Y0DkKXnzxpdv6luoskRMe_tenable-nessus-tenable-io10.png" alt="AppSpider Connector - Test Credentials" position="flex-start" size="28" width="194" height="138" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Tenable Nessus Tenable io_10.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Tenable Nessus Tenable io_10.png" showCaption="false"} Configure the desired schedule for the connector to retrieve results from the AppSpider Enterprise instance and optionally turn on **Enable auto URBA (Update Remediation by Assessment)**. Under **Connector Specific Options**, complete the mandatory field with the user’s API token expiry. Refer to the [Fetching the API Token Expiry from AppSpider Enterprise](docId\:nfmDIHeCGGBYs-Fj1O8ff) section of this guide for how to obtain the API token expiry. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/9iG06Q6FaTgburxGa3AGc_rapid7-appspider-connector3.png" alt="AppSpider Connector - Schedule and Connector Specific Options" position="flex-start" size="79" width="551" height="565" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_3.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_3.png" showCaption="false"} Once connector configuration is complete, click **Save** to create the connector. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/HC3OGdcyd9td9mXmBCRFL_rapid7-appspider-connector4.png" alt="AppSpider Connector - Save Button Location" position="flex-start" size="79" width="551" height="215" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_4.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_4.png" showCaption="false"} After creating the connector, it starts pulling data from AppSpider Enterprise. After configuring the connector, a new entry for it appears at the top of the **Integrations** page. The connector’s card shows the next scheduled time and date it will fetch results. Check the connector’s status by clicking the **History** button. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/Lk97gkmgFw_5LZ5vQcCV8_rapid7-appspider-connector5.png" alt="AppSpider Connector - Connector History" position="flex-start" size="82" width="573" height="187" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_5.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_5.png" showCaption="false"} To run the connector on demand, click the **Sync** icon. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/sKb2QqB4v3061TkAWi_i9_rapid7-appspider-connector6.png" alt="AppSpider Connector - Sync Button Location" position="flex-start" size="34" width="236" height="269" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_6.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_6.png" showCaption="false"} Files pulled from AppSpider Enterprise are viewable on the **Uploads** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/tajZ2OEaG9vtGKXBUwsdO_rapid7-appspider-connector7.png" alt="AppSpider Connector - Uploads Page" position="flex-start" size="98" width="687" height="197" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_7.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_7.png" showCaption="false"} ## Data Visualization in the Ivanti Neurons Platform Scan data pulled from AppSpider Enterprise via the connector is available on the **Manage > Applications** and **Manage** **> Application Findings** pages. Assets discovered from the scan data are added to the **Manage >** **Applications** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/ze8LOCfaMx3wvsICWqRiG_rapid7-appspider-connector8.png" alt="AppSpider Connector - Applications Page" position="flex-start" size="98" width="687" height="220" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_8.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_8.png" showCaption="false"} The **Manage > Application Findings** page displays all identified vulnerability details, as shown below. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/qdWr6oxn0dEH-Okz4ADPN_rapid7-appspider-connector9.png" alt="AppSpider Connector - AppSpider Findings on Application Findings Page" position="flex-start" size="98" width="688" height="201" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_9.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Rapid7 AppSpider Connector_9.png" showCaption="false"}