Azure DevOps

Overview

AttackForge allows users to self-export vulnerabilities from AttackForge into their Azure DevOps tenant.

Azure DevOps is a Software as a service (SaaS) platform from Microsoft that provides an end-to-end DevOps toolchain for developing and deploying software. It also integrates with most leading tools on the market and is a great option for orchestrating a DevOps toolchain.

To self-export vulnerabilities into Azure DevOps, select the vulnerabilities then click on Export/Sync in the actions menu.

Select Azure DevOps.

Enter the following details:‌‌

• Organization - this should be your Organization in ADO. You can get this from the URL you use to access your tenant.

• Project - this is the project where you would like the vulnerabilities to be exported to as Work Items. You can get this from the URL you use to access your tenant.

• Email - this is your email address you use to log into ADO.

• Personal Access Token (PAT) - this is your Personal Access Token you have set up for your account. You can create a new PAT from https://dev.azure.com/ORGANIZATION/_usersSettings/tokens

‌Once you have added the information, click Export. All of your vulnerabilities will appear as new Work Items in ADO.

Custom Integrations

Custom integrations, including real-time fully-automated bi-directional integrations, can be performed using AttackForge's Events API and out-of-the-box middleware. For more details, please speak with your AttackForge account manager.