For the complete documentation index, see llms.txt. This page is also available as Markdown.
Mutual TLS
How to configure mutual TLS for Snyk API and Web targets
Configure mutual TLS (mTLS) authentication for targets that require client-side certificates.
Unlike standard TLS, which authenticates only the server, mutual TLS is an enhanced security protocol where both the client and server authenticate using digital certificates.
Prerequisites
You must have the change target settings permission
You must have your client authentication certificate (.p12 or .pfx format)
You must have the corresponding certificate password
Your account plan must include this feature
Upload the certificate
Navigate to the Targets page.
Click the gear icon to access the target settings.
Select the Authentication tab and locate the Client Authentication Certificate section.
Upload your .p12 or .pfx certificate file.
Enter the Certificate Password required to decrypt the file.
Click Save.
Verify the configuration
After you save the configuration, mutual TLS authentication is enabled. The next scan against this target automatically uses the configured mTLS certificates.
Important: For your security, Snyk obfuscates all sensitive fields (certificates and passwords) after saving. You cannot view or retrieve them again.
Manage the configuration
You can manage these settings anytime from your target's Authentication tab:
To temporarily disable the setting, use the Off/On toggle
To permanently remove the configuration, use the Delete button
