Cyver Core integrates with Escape to support automated Dynamic Application Security Testing (DAST) and Attack Surface Management (ASM) through Continuous Projects.
The integration allows you to configure scanning activities, schedule recurring scans, and manage scanner-generated findings directly within your projects.
1. Understanding the Available Scanning Services
Escape supports two scanning services within Cyver Core:
DAST (Dynamic Application Security Testing)
DAST scans running applications to identify potential security vulnerabilities. It helps security teams continuously assess application security and track identified vulnerabilities over time.
ASM (Attack Surface Management)
ASM helps discover and monitor assets associated with a target, providing greater visibility into the organization's attack surface.
Both services can be configured through Continuous Project Templates, with dedicated settings for managing scanner execution and results.
2. Connect to Escape
Before configuring automated scans, you must establish the connection between Cyver Core and Escape.
- Navigate to Settings → Administration → Integrations.
- Locate Escape in the list of available integrations.
- Click Connect to Escape.
- Complete the connection form using the following fields:
| Field | Description |
| API URL | The Escape API endpoint URL, which will be provided by the Cyver team. |
| API Key | The API key used to authenticate the connection. Connection credentials are provided by the Cyver team. |
| Escape Project Name | The Escape project used for scanning. If it doesn't exist, it will be created automatically. Leave blank to use the tenant name. |
| Max Concurrent Scans | The maximum number of scans that can run simultaneously across this integration. |
- Click Save to establish the connection.
Configure Continuous Project Templates
After connecting Escape, the next step is to configure the Continuous Project Templates that will define how scanning activities are executed.
We recommend creating separate templates for each scanning service, such as DAST and ASM, to allow independent configurations.
- Navigate to Settings left menu → Continuous Pentest Templates.
- Create a new Continuous Project Template or edit an existing one.
- Select Integrated Scanner Run Based as the use case.
- Review and configure the Run Complete settings according to your preferred workflow.
- Under Vulnerability Scanner, select the required service:
- Escape DAST
- Escape ASM
Configure Scanner Output
Within the template, you can customize how scanner-generated findings are processed.
The available configurations include:
- Aggregate Findings: Choose whether findings should be automatically aggregated with multiple pieces of evidence.
- Finding Labels: Assign specific labels to findings created from scanner results, making them easier to identify and categorize.
- Finding Status: Define the initial status assigned to imported findings, according to your review and publication workflow.
- Recurring Scans: Enable automated recurring scans to run at predefined intervals.
Configure Recurring Scans
When recurring scanning is enabled, you can select the preferred frequency:
- Weekly
- Monthly
- Quarterly
This allows scanning activities to run automatically without requiring manual initiation for every scan.
Once the configuration is complete, save the template.
4. Create and Run a Continuous Project
After configuring the template, you can create a Continuous Project using the selected scanning service.
- Navigate to Continuous Projects.
- Create a new project.
- Select the appropriate template configured for Escape DAST or Escape ASM.
- Define the target asset and complete the required project information.
- Start the scan.
Target Asset Behavior
For both DAST and ASM, the target asset is fixed once the first scan starts.
This ensures that the scan runs against the same hostname throughout its execution, maintaining consistency between the scanning target and the generated results over runs.
Scan Status Synchronization
Cyver Core periodically checks Escape for scan updates.
| Scanning Service | Synchronization Interval |
| Escape DAST | Every 15 minutes |
| Escape ASM | Every 3 minutes |
These intervals determine how frequently Cyver Core checks for updates and data retrieval from Escape.
5. Review Scanner Results
Once scanner results are available, they can be reviewed within the corresponding Continuous Project.
DAST Results
Findings generated through Escape DAST are imported into the project findings according to the configuration defined in the Continuous Project Template.
Depending on your settings, findings can be assigned predefined statuses and labels, and related evidence can be aggregated.
You can then review and manage these findings through the project's existing vulnerability management workflow.
ASM Results
Escape ASM can identify additional assets associated with the target.
These discovered sub-assets are available in two locations:
- Project → Scope → Assets: Review the assets discovered during ASM scanning.
- Parent Asset: View the discovered sub-assets associated with the original target asset.
This provides visibility into the discovered attack surface while maintaining the relationship between the original target and its associated assets.
6. Managing Continuous Scanning
Once configured, the integration supports ongoing security assessments through reusable templates and recurring scan schedules.
You can adjust scanner configurations, finding classifications, and scan frequency to align the assessment process with your organization's security requirements.
For environments using both DAST and ASM, separate Continuous Project Templates allow each service to maintain its own scanning configuration and results management process.