> For the complete documentation index, see [llms.txt](https://support.attackforge.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.attackforge.com/core/add-ons.md).

# Add-Ons

## Add-Ons

AttackForge gives you everything you need to run offensive security testing out of the box. Add-ons take you further. They automate the repetitive work, connect AttackForge to the rest of your technology stack, and give leadership a clear view of how your security program is performing.

{% hint style="info" %}
Depending on your plan, some add-ons may already be included in your licence. Administrators can review and enable add-ons from `Administration > Subscriptions`.
{% endhint %}

### Why Consider Add-Ons?

* **Stop doing the busywork.** Security teams lose hours every week to chasing remediation owners, copying findings into ticketing systems, and sending status updates. Add-ons like Flows, Actions and Premium Notifications automate these tasks so your testers and managers can spend their time on high-value work.
* **Make AttackForge part of your ecosystem.** Your vulnerability data is most valuable when it reaches the people and systems that act on it. Flows, the Self-Service APIs and AI MCP connect AttackForge to your ticketing, GRC, BI, scanning, bug bounty and collaboration tools, as well as your AI assistants. Data flows both ways, so nothing gets lost or re-keyed.
* **Manage a program, not just projects.** As your testing grows, you need to see the bigger picture. Portfolios, the Centralized Asset Register and Premium Analytics let you organise testing around business units, applications and assets, track coverage, and show how risk is trending over time.
* **Build for tomorrow, not just today.** Every organisation's workflow is different, and it changes. Add-ons give you the building blocks to adapt AttackForge to your processes as they evolve, without waiting on custom development or professional services.
* **Reduce risk faster.** Better automation, visibility and accountability mean vulnerabilities reach the right owner sooner, SLAs are tracked consistently, and nothing slips through the cracks.

### Available Add-Ons

| Add-On                                                                                                                            | Who It's For                                                                                                                                                                         | Key Benefits                                                                                                                                                                                                                                                                                                                                                                                                                    |
| --------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [**Flows**](https://support.attackforge.com/app/modules/flows) **and** [**Actions**](https://support.attackforge.com/app/actions) | Testers, security operations, platform engineers, project managers, remediation teams and people integrating AttackForge with other tools or who want automation at their fingertips | <p><strong>Flows:</strong> Our powerhouse workflow automation and integration engine. Automate QA, reporting and two-way integrations with tools like JIRA, ServiceNow, Power BI, Slack and Teams, triggered by events, schedules or web-hooks.</p><p></p><p><strong>Actions:</strong> Build custom workflows in the application UI and trigger automations and integrations with a single click, with no scripting needed.</p> |
| [**AI MCP**](https://support.attackforge.com/app/modules/ai-mcp-and-skills)                                                       | Testers, security leaders and analysts using AI assistants such as Claude, ChatGPT, Microsoft Copilot or self-hosted models                                                          | Connect your AI assistants to AttackForge for real-time query and retrieval of your projects, vulnerabilities, assets and writeups. Orchestrate AI agents for pentesting, vulnerability enrichment and retesting. Generate executive summaries, dashboards and reports from a simple prompt. Administrators control tool access per user, and local models are supported so data never has to leave your machine.               |
| [**Portfolios**](https://support.attackforge.com/app/modules/portfolios)                                                          | CISOs, security program managers and MSSPs managing testing across many business units or clients                                                                                    | Organise projects into portfolios and streams to manage your security testing program. Track coverage and progress across your organisation, and see where testing is due, underway or overdue.                                                                                                                                                                                                                                 |
| [**Self-Service APIs**](https://support.attackforge.com/app/modules/self-service-restful-api)                                     | Testers, developers, DevSecOps teams and integration engineers                                                                                                                       | 200+ APIs and events covering every workflow and use case you need now and into the future. Automate project creation, vulnerability import, user management, reporting data and more, and subscribe to real-time events as data changes.                                                                                                                                                                                       |
| [**Centralized Asset Register**](https://support.attackforge.com/app/modules/assets)                                              | Asset owners, security program managers, security architects and teams responsible for continuous testing and attack surface management                                              | Define, create, group, manage and track assets in one place. Enforce access through asset libraries, and see the vulnerability and testing history of every asset across all projects.                                                                                                                                                                                                                                          |
| [**Premium Notifications**](https://support.attackforge.com/app/getting-started/notifications#custom-time-based-emails)           | Program managers, remediation owners and anyone accountable for SLAs                                                                                                                 | Let our custom time-based email engine do the hard work of notifying you and your teams about what matters. Automate reminders for upcoming deadlines, SLA breaches, retests and overdue remediation, so nothing falls through the cracks.                                                                                                                                                                                      |
| [**Premium Analytics**](https://support.attackforge.com/app/modules/analytics)                                                    | CISOs, executives and security managers reporting on program performance                                                                                                             | Compare how your program is performing and perform trend analysis over time. Identify the most common vulnerabilities, most vulnerable assets and most failed test cases, and back up investment decisions with data.                                                                                                                                                                                                           |
| [**Project**](https://support.attackforge.com/app/modules/projects) **Credits**                                                   | Teams which have a spike of work in a given month which exceeds their available plan credits.                                                                                        | Fast in-app purchase to avoid disruption to workflow. Start on that test right away!                                                                                                                                                                                                                                                                                                                                            |
| [**Group**](https://support.attackforge.com/app/modules/groups) **Credits**                                                       | Teams which need more group credits for efficient user access management for new customers, internal or external teams.                                                              | <p>Set up that team and delegate them access.</p><p><a href="https://support.attackforge.com/other/contact">Contact us</a> to increase your group limits.</p>                                                                                                                                                                                                                                                                   |
| [**Non-Client User**](https://support.attackforge.com/app/modules/users) **Credits**                                              | Growing teams which have more testers, quality managers, project managers.                                                                                                           | <p>More efficient testing processes and workflows when everyone works with and collaborates on the same tooling.</p><p><a href="https://support.attackforge.com/other/contact">Contact us</a> to increase your non-client user limits.</p>                                                                                                                                                                                      |

{% hint style="info" %}
Ensure to always use your project credits each month - even if you do not need the project that month. You can create placeholder projects and re-purpose them later on - that way you will maximize your project credit allocation within your licence.
{% endhint %}

### Getting Started

To enable an add-on, go to `Administration > Subscriptions`. If you'd like to get hands on with and try these add-ons for yourself - [Start a Free Trial on demand](https://try.attackforge.io/start).

<figure><img src="https://372186556-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8s1QY2Q6YTHB4a6DMu%2Fuploads%2FLQZaemRKIuw3uOhxALlL%2FScreenshot%202026-09-23%20at%209.10.04%E2%80%AFam.png?alt=media&amp;token=dfe70c6b-4fcf-421e-b4fc-b0ec2ef30b6e" alt=""><figcaption></figcaption></figure>

For example, to add a project credit - click on `Projects > Add`:

<figure><img src="https://372186556-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8s1QY2Q6YTHB4a6DMu%2Fuploads%2FI8qPWZkbz33MMIEzJibK%2FScreenshot%202026-09-23%20at%209.12.15%E2%80%AFam.png?alt=media&amp;token=bfa17d16-859a-4c13-a892-05abecc83d7d" alt=""><figcaption></figcaption></figure>

You will be redirected to Stripe. Select the quantity of credits to add-on. Input your card details, then click `Pay`:

<figure><img src="https://372186556-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8s1QY2Q6YTHB4a6DMu%2Fuploads%2FpajvLGXJ7dtd6vxYDIBk%2FScreenshot%202026-09-23%20at%209.19.25%E2%80%AFam.png?alt=media&amp;token=c2850644-9fa6-4c55-a43e-3b6908c45d1f" alt=""><figcaption></figcaption></figure>

You will be redirected back to AttackForge and your add-on will be automatically applied.

<figure><img src="https://372186556-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8s1QY2Q6YTHB4a6DMu%2Fuploads%2FYytBmR27sIpcxxNsAjvr%2FScreenshot%202026-09-23%20at%209.22.55%E2%80%AFam.png?alt=media&amp;token=4ccbc0a9-0060-4327-89ac-f08e62e50909" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://support.attackforge.com/core/add-ons.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.