Disable SSL verification

[_joe]

Hello,

How do I disable SSL verification on the Invicti Platform add-on?

Is this a replacement for the net sparker app ?

Thanks

[nachimistry · Accepted solution]

On the second question: they're two separate add-ons for two separate Invicti products. The Invicti Platform Add-on (https://splunkbase.splunk.com/app/9588) (v1.0.0, released Aug 2026) is for the newer Invicti Platform (platform.invicti.com and its EU and CA regions, or an on-prem Platform host). The Netsparker Enterprise Add-on (https://splunkbase.splunk.com/app/5511) is still the one for Invicti Enterprise (netsparkercloud.com or Invicti Enterprise on-prem). So whether it replaces your Netsparker app depends on which product your license is for, not on which add-on is newer.

On SSL: the Invicti setup docs (https://docs.invicti.com/ip/splunk) cover the account, proxy and logging settings, but I don't see a verify-SSL toggle documented. Before you disable verification, I'd try fixing trust instead, since this usually comes up with an on-prem host signed by an internal CA or a TLS-inspecting proxy.

• If you go through a proxy, set it on the add-on's Proxy tab, and make sure the proxy's CA is trusted.
• Check whether the add-on ships a setting for it: grep -ri "verify" $SPLUNK_HOME/etc/apps/<invicti_app_folder>/default/ $SPLUNK_HOME/etc/apps/<invicti_app_folder>/README*
• If there's no setting, the fix is to get your internal CA into the CA bundle the add-on's Python uses, rather than editing its code. Any code edit gets overwritten on the next upgrade.

Set the add-on's log level to DEBUG for one run to see the exact TLS error. A hostname mismatch and an unknown CA have different fixes.