Add-Ons
Add-Ons
AttackForge gives you everything you need to run offensive security testing out of the box. Add-ons take you further. They automate the repetitive work, connect AttackForge to the rest of your technology stack, and give leadership a clear view of how your security program is performing.
Why Consider Add-Ons?
Stop doing the busywork. Security teams lose hours every week to chasing remediation owners, copying findings into ticketing systems, and sending status updates. Add-ons like Flows, Actions and Premium Notifications automate these tasks so your testers and managers can spend their time on high-value work.
Make AttackForge part of your ecosystem. Your vulnerability data is most valuable when it reaches the people and systems that act on it. Flows, the Self-Service APIs and AI MCP connect AttackForge to your ticketing, GRC, BI, scanning, bug bounty and collaboration tools, as well as your AI assistants. Data flows both ways, so nothing gets lost or re-keyed.
Manage a program, not just projects. As your testing grows, you need to see the bigger picture. Portfolios, the Centralized Asset Register and Premium Analytics let you organise testing around business units, applications and assets, track coverage, and show how risk is trending over time.
Build for tomorrow, not just today. Every organisation's workflow is different, and it changes. Add-ons give you the building blocks to adapt AttackForge to your processes as they evolve, without waiting on custom development or professional services.
Reduce risk faster. Better automation, visibility and accountability mean vulnerabilities reach the right owner sooner, SLAs are tracked consistently, and nothing slips through the cracks.
Available Add-Ons
Testers, security operations, platform engineers, project managers, remediation teams and people integrating AttackForge with other tools or who want automation at their fingertips
Flows: Our powerhouse workflow automation and integration engine. Automate QA, reporting and two-way integrations with tools like JIRA, ServiceNow, Power BI, Slack and Teams, triggered by events, schedules or web-hooks.
Actions: Build custom workflows in the application UI and trigger automations and integrations with a single click, with no scripting needed.
Testers, security leaders and analysts using AI assistants such as Claude, ChatGPT, Microsoft Copilot or self-hosted models
Connect your AI assistants to AttackForge for real-time query and retrieval of your projects, vulnerabilities, assets and writeups. Orchestrate AI agents for pentesting, vulnerability enrichment and retesting. Generate executive summaries, dashboards and reports from a simple prompt. Administrators control tool access per user, and local models are supported so data never has to leave your machine.
CISOs, security program managers and MSSPs managing testing across many business units or clients
Organise projects into portfolios and streams to manage your security testing program. Track coverage and progress across your organisation, and see where testing is due, underway or overdue.
Testers, developers, DevSecOps teams and integration engineers
200+ APIs and events covering every workflow and use case you need now and into the future. Automate project creation, vulnerability import, user management, reporting data and more, and subscribe to real-time events as data changes.
Asset owners, security program managers, security architects and teams responsible for continuous testing and attack surface management
Define, create, group, manage and track assets in one place. Enforce access through asset libraries, and see the vulnerability and testing history of every asset across all projects.
Program managers, remediation owners and anyone accountable for SLAs
Let our custom time-based email engine do the hard work of notifying you and your teams about what matters. Automate reminders for upcoming deadlines, SLA breaches, retests and overdue remediation, so nothing falls through the cracks.
CISOs, executives and security managers reporting on program performance
Compare how your program is performing and perform trend analysis over time. Identify the most common vulnerabilities, most vulnerable assets and most failed test cases, and back up investment decisions with data.
Project Credits
Teams which have a spike of work in a given month which exceeds their available plan credits.
Fast in-app purchase to avoid disruption to workflow. Start on that test right away!
Group Credits
Teams which need more group credits for efficient user access management for new customers, internal or external teams.
Set up that team and delegate them access.
Contact us to increase your group limits.
Non-Client User Credits
Growing teams which have more testers, quality managers, project managers.
More efficient testing processes and workflows when everyone works with and collaborates on the same tooling.
Contact us to increase your non-client user limits.
Getting Started
To enable an add-on, go to Administration > Subscriptions. If you'd like to get hands on with and try these add-ons for yourself - Start a Free Trial on demand.
For example, to add a project credit - click on Projects > Add:
You will be redirected to Stripe. Select the quantity of credits to add-on. Input your card details, then click Pay:
You will be redirected back to AttackForge and your add-on will be automatically applied.
Last updated