# AppSec Integrations

Connect your application security platforms to RAD Security for comprehensive vulnerability management and security scanning.



Integrate your application security platforms with RAD Security to gain visibility into security findings, vulnerabilities, and compliance issues across your applications.

## Benefits

<Columns cols={2}>
  <div>
  **Centralized Vulnerability View**
    Aggregate security findings from multiple application security tools in a unified dashboard.
  </div>
  <div>
  **Security Posture Tracking**
    Monitor application security trends and track remediation progress over time.
  </div>
  <div>
  **Risk Prioritization**
    Correlate application security findings with runtime data to prioritize critical vulnerabilities.
  </div>
  <div>
  **Compliance Reporting**
    Generate compliance reports that include application security scanning results.
  </div>
</Columns>

## Supported Integrations

<ExpandableGroup>
  <Expandable title="GitLab" icon="gitlab">
    **Status:** Available

    [View Setup Guide →](/rad-security/integrations/appsec/gitlab-setup)

    Connect GitLab to RAD Security for application security scanning and vulnerability management across your GitLab instance or groups.

    **Key Features:**
    - SAST (Static Application Security Testing) findings
    - DAST (Dynamic Application Security Testing) findings
    - Dependency scanning results
    - Container scanning results
    - Secret detection findings
    - Vulnerability severity and classification
    - Remediation guidance

    **Requirements:**
    - GitLab instance access (cloud or self-hosted)
    - Admin or Owner role (recommended)
    - API token with `read_api` scope
  </Expandable>

  <Expandable title="Snyk" icon="shield-halved">
    **Status:** Available

    [View Setup Guide →](/rad-security/integrations/appsec/snyk-setup)

    Import Snyk application security findings for vulnerability management, code security analysis, and correlation with runtime data.

    **Key Features:**
    - Snyk Code (SAST) findings
    - Open source dependency vulnerabilities
    - Container image vulnerabilities
    - Infrastructure as Code issues
    - OAuth 2.0 Service Account authentication

    **Requirements:**
    - Snyk Enterprise plan
    - Org Admin, Group Admin, or Group Member role
    - OAuth 2.0 Service Account with required permissions
  </Expandable>
</ExpandableGroup>

## What Data is Collected

<ExpandableGroup>
  <Expandable title="Security Findings" icon="shield-exclamation">
    - SAST findings and code vulnerabilities
    - DAST findings from dynamic analysis
    - Dependency and supply chain vulnerabilities
    - Container image vulnerabilities
    - Secrets and credentials exposed in code
  </Expandable>

  <Expandable title="Application Data" icon="grid-2">
    - Application and project metadata
    - Repository information
    - CI/CD pipeline security job results
  </Expandable>

  <Expandable title="Vulnerability Details" icon="magnifying-glass">
    - Severity and CVSS scores
    - Affected files and line numbers
    - Vulnerability descriptions and context
    - Remediation recommendations
    - Finding status and resolution tracking
  </Expandable>
</ExpandableGroup>

## Use Cases

<Columns cols={2}>
  <div>
  **Vulnerability Management**
    Track and manage application vulnerabilities from discovery through remediation.
  </div>

  <div>
  **Shift-Left Security**
    Identify and address security issues early in the development lifecycle.
  </div>

  <div>
  **Compliance Validation**
    Ensure applications meet security compliance requirements and standards.
  </div>

  <div>
  **Security Trends**
    Analyze security trends across applications to improve overall security posture.
  </div>

  <div>
  **Automated Remediation**
    Leverage RADBot to help prioritize and remediate application security findings.
  </div>

  <div>
  **Supply Chain Security**
    Monitor dependencies and container images for known vulnerabilities.
  </div>
</Columns>

## Getting Started

<Steps>
  <Step title="Choose Your Platform">
    Select your application security platform from the supported integrations above.
  </Step>

  <Step title="Generate API Credentials">
    Create an API token or service account with the required permissions in your platform.
  </Step>

  <Step title="Configure in RAD Security">
    Add the integration in your RAD Security workspace with the generated credentials.
  </Step>

  <Step title="Verify Connection">
    Confirm the integration is active and security findings are being synced.
  </Step>

  <Step title="Review Findings">
    Navigate to the Evidence Room to view and analyze application security findings.
  </Step>
</Steps>

## Security Best Practices

<ExpandableGroup>
  <Expandable title="Use Service Accounts" icon="user-gear">
    Create dedicated service accounts for integrations rather than using personal tokens. This ensures continuity when team members change roles.
  </Expandable>

  <Expandable title="Minimal Permissions" icon="shield-halved">
    Only grant read-only permissions required for the integration. Application security integrations typically don't need write access.
  </Expandable>

  <Expandable title="Token Rotation" icon="rotate">
    Rotate API tokens regularly according to your security policies to minimize risk of credential compromise.
  </Expandable>

  <Expandable title="Audit Access" icon="clipboard-list">
    Regularly review integration access logs and permissions to ensure appropriate usage.
  </Expandable>
</ExpandableGroup>

## Next Steps

<Columns cols={2}>
  <Card title="GitLab Setup" icon="gitlab" href="/rad-security/integrations/appsec/gitlab-setup" >
    Connect GitLab for application security scanning
  </Card>

  <Card title="Evidence Room" icon="vault" href="/rad-security/platform/evidence-room" >
    View and analyze security findings
  </Card>

  <Card title="Data Sources Overview" icon="database" href="/rad-security/integrations/data-sources" >
    Explore all available data sources
  </Card>

  <Card title="RADBot" icon="robot" href="/rad-security/getting-started/radbot" >
    Learn how RADBot helps prioritize vulnerabilities
  </Card>
</Columns>