Enable Alerts for Websites - Enable Cortex Xpanse to create alerts when potential risks are observed on your websites. - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2025-03-26
Last date published
2026-02-26
Category
User Guide
Solution
SaaS
Abstract

Enable Cortex Xpanse to create alerts when potential risks are observed on your websites.

Cortex Xpanse provides Attack Surface Rules that detect website security best practice failures. These are the best practices that are assessed in the Security Best Practices Analysis section of website details pages in the Inventory.

The attack surface rules for websites are disabled by default. Enable these attack surface rules to enable Cortex Xpanse to start creating alerts for websites.

  1. Navigate to RulesAttack Surface Rules.

  2. Use the filter to find the attack surface rules for websites.

    1. Click the filter icon in the upper right corner to open the filter bar.

    2. In the Select Field dropdown menu, select ASM Alert Categories.

    3. In the Value field dropdown menu, select the two attack surface rule categories for websites: Web Security Assessments.

    4. Click outside of the filter area into the results table to see the full list of attack surface rules for websites.

  3. For each attack surface rule you want to enable, right click in the appropriate row and select Enable.

  4. Optionally, you can change the default severity that will be assigned to alerts that match the attack surface rule by right-clicking on the rule and choosing from the Change Severity options.