Sync Assets & Vulnerabilities from Veracode DAST to Strobes

This article explains how you can sync assets and vulnerabilities from your Veracode dashboard to Strobes. In order to sync assets and vulnerabilities, you will have to configure Veracode credentials first. More about how to configure Veracode credentials here.

Steps to Sync Veracode DAST with Strobes

1. Go to the Connectors Section

• Navigate to Connectors in the left-hand menu.
• Under Dynamic Application Scanners, click on Veracode DAST.
  

2. Create a New Configuration

• Click Add Configuration.
• Fill in the following:
  
  • Configuration Name: Give your sync configuration a unique name.
  • Veracode Credential: Select the credential you previously saved.
  • Baseline: Choose a baseline to log vulnerabilities against.

Click Next to proceed.

3. Set Sync Preferences

• Agent: Choose Strobes Default Agent.

• Sync Frequency: Select how often you want Strobes to fetch data (e.g., hourly, daily, weekly).
  

4. Add Tracking & Notifications (Optional)

• If needed, select tools for tracking or receiving alerts (e.g., Slack, Jira).
• Click Submit to save your configuration.

5. Initiate Sync

• After configuration, you’ll see it listed under Veracode DAST.
• Click Sync Now to immediately sync assets and vulnerabilities from Veracode to Strobes.

What Happens Next?

Once synced:

• Strobes will import all the assets and associated vulnerabilities from your Veracode scans.
• These will be visible under the Assets and Vulnerabilities modules, ready for triaging and remediation workflows.

If you’ve set up a recurring schedule, the sync will happen automatically based on your selected frequency.