docs(connectors): add Acunetix 360 connector reference (#15267)

Setup and usage for the Acunetix 360 connector: API User ID + API Token
(HTTP Basic) from the account API Settings page, the cloud Location, connector
field mappings, and import behavior (one Record per scanned website; findings
from the latest completed scan; accepted-risk / false-positive imported but
flagged inactive). Distinguishes the cloud product from the on-prem Acunetix
Standard scanner. Placed first (alphabetical).

Story: sc-13709

Author: devGregA

docs/content/import_data/pro/connectors/connectors_tool_reference.md

@@ -30,6 +30,25 @@ Azure DevOps, Bitbucket, GitHub, GitLab, Jira Service Management Assets, and Ser
 
 # **Supported Connectors**
 
+## **Acunetix 360**
+
+The Acunetix 360 connector imports **DAST vulnerability findings** from the Acunetix 360 cloud platform (the Invicti platform). DefectDojo discovers your account's scanned websites and creates a Record for each **website**; the findings for a website come from its latest completed scan.
+
+**Please note:** this connector is for **Acunetix 360** (the cloud product at `online.acunetix360.com`). It is not for the on\-premises Acunetix Standard/Premium scanner, which has a different API.
+
+#### Prerequisites
+
+An Acunetix 360 account and an **API credential**: in Acunetix 360, open your account menu \> **API Settings**, and note the **API User ID** and generate an **API Token**. The connector authenticates with these as HTTP Basic credentials, so a dedicated service account is recommended to distinguish automated activity from manual team actions.
+
+#### Connector Mappings
+
+1. Enter your Acunetix 360 URL in the **Location** field: `https://online.acunetix360.com`.
+2. Enter the API User ID in the **API User ID** field.
+3. Enter the API Token in the **API Token** field.
+4. Optionally, set a **Minimum Severity** to limit which findings are imported.
+
+Each scanned website becomes a Record. Findings come from the website's latest completed scan; vulnerabilities Acunetix 360 has marked **Accepted Risk** or **False Positive** are still imported but flagged inactive (risk\-accepted or false\-positive) so the DefectDojo product reflects the vendor's triage.
+
 ## **Akamai API Security**
 
 The Akamai API Security connector uses an API key to pull security findings from the Akamai API. DefectDojo will discover your Akamai environment and create separate Records for each **Application** and **Host** configured in your account.