Vulnerability scanners

Tenable Nessus

Your Nessus scans checked against your cases: every unconfirmed fix stands out, host by host.

What the connector does

TechWatchAlert reads exports from Nessus, Tenable Security Center and Tenable Vulnerability Management and checks each CVE found against your tracking cases. Tenable Vulnerability Management and Tenable Security Center can also be read directly through their API, with no file to upload. TechWatchAlert scans nothing itself: it becomes the management layer on top of your scanner.

What comes into TechWatchAlert

Hosts (IP, DNS or NetBIOS name, OS), ports and plugins from the report
One row per CVE, even when a plugin cites several
Unconfirmed fixes: CVEs marked fixed but still found
Untracked CVEs, which reveal a gap in the declared inventory
Dated evidence of the scan, feeding your NIS2 posture

Setup

Export the scan as .nessus (XML v2) or CSV
Import it into the project's Stack › Scans (20 MB max)
Or have a scheduled task upload it via the API, with a key holding the “scans” permission

In the same family

Tenable Vulnerability ManagementOpen vulnerabilities from Tenable Vulnerability Management read through the API and checked against your cases, with no export to upload.View connector →Tenable Security CenterThe vulnerabilities of every host in your Tenable Security Center console, read through the API and checked against your tracking.View connector →Qualys VMDRYour Qualys VMDR detections, read through the API or imported, checked against your tracking to see what really remains to fix.View connector →Rapid7 InsightVM / NexposeYour InsightVM vulnerabilities read through the API, or your InsightVM and Nexpose exports imported, turned into fix tracking, host by host.View connector →Microsoft Defender Vulnerability ManagementThe vulnerabilities Defender sees on each machine, software by software, checked against your cases without deploying anything.View connector →CrowdStrike Falcon SpotlightThe open vulnerabilities of every endpoint protected by Falcon, read through the API with a single read scope.View connector →Greenbone / OpenVASYour Greenbone and OpenVAS reports checked against your monitoring, minus known false positives.View connector →TrivyYour Trivy reports uploaded by CI and checked against your cases, on every build.View connector →GrypeYour Grype reports checked against your tracking, with the evidence behind each match.View connector →

Connectors

Plug in your tools in minutes

Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.

Talk to the team

Free plan, no credit card · hosted in France