Vulnerability scanners
Rapid7 InsightVM / Nexpose
Your InsightVM vulnerabilities read through the API, or your InsightVM and Nexpose exports imported, turned into fix tracking, host by host.
What the connector does
TechWatchAlert reads InsightVM through the API, from your console or from the Insight Platform, with a read-only account; it also reads XML Export 2.0 or CSV exports from InsightVM and Nexpose. Each CVE found is checked against the project's cases to surface the fixes that did not take.
What comes into TechWatchAlert
- Assets, their vulnerabilities and the CVEs of each
- One row per CVE, even when a check cites several
- Unconfirmed fixes and untracked CVEs
- Per-host detail, most exposed first
Setup
- InsightVM console: create an account with the “User” role and only the “View Site Asset Data” permission, then enter the console address, the account and its password
- Insight Platform: create a user API key for an account with read-only access to InsightVM, then enter the region and the key
- Or export the report as XML Export 2.0 or CSV and import it into Stack › Scans, by hand or via the API
In the same family
Tenable NessusYour Nessus scans checked against your cases: every unconfirmed fix stands out, host by host.View connector →Tenable Vulnerability ManagementOpen vulnerabilities from Tenable Vulnerability Management read through the API and checked against your cases, with no export to upload.View connector →Tenable Security CenterThe vulnerabilities of every host in your Tenable Security Center console, read through the API and checked against your tracking.View connector →Qualys VMDRYour Qualys VMDR detections, read through the API or imported, checked against your tracking to see what really remains to fix.View connector →Microsoft Defender Vulnerability ManagementThe vulnerabilities Defender sees on each machine, software by software, checked against your cases without deploying anything.View connector →CrowdStrike Falcon SpotlightThe open vulnerabilities of every endpoint protected by Falcon, read through the API with a single read scope.View connector →Greenbone / OpenVASYour Greenbone and OpenVAS reports checked against your monitoring, minus known false positives.View connector →TrivyYour Trivy reports uploaded by CI and checked against your cases, on every build.View connector →GrypeYour Grype reports checked against your tracking, with the evidence behind each match.View connector →
Connectors
Plug in your tools in minutes
Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.
Free plan, no credit card · hosted in France