Vulnerability scanners
Tenable Vulnerability Management
Open vulnerabilities from Tenable Vulnerability Management read through the API and checked against your cases, with no export to upload.
What the connector does
The connector reads, through the Tenable Vulnerability Management API, the open or reopened vulnerabilities on your assets, and the assets themselves. Each run writes a scan to the project, checked against your tracking cases exactly like an imported report; recognized assets join your fleet.
What comes into TechWatchAlert
- Open or reopened vulnerabilities seen in the last 90 days, one row per CVE
- Assets: name, FQDN, addresses, OS, serial number, hardware UUID
- Unconfirmed fixes: CVEs marked fixed but still seen by Tenable
- Untracked CVEs, which reveal a gap in the declared inventory
- Run history, with CVEs that appeared and disappeared, host by host
Setup
- In Tenable Vulnerability Management, create a dedicated user with the “Basic” role and “Can View” access to the assets to monitor
- Generate its API keys (access key and secret key)
- In the project's connectors, under “Vulnerability scanners”, enter both keys and run the connection test
In the same family
Tenable NessusYour Nessus scans checked against your cases: every unconfirmed fix stands out, host by host.View connector →Tenable Security CenterThe vulnerabilities of every host in your Tenable Security Center console, read through the API and checked against your tracking.View connector →Qualys VMDRYour Qualys VMDR detections, read through the API or imported, checked against your tracking to see what really remains to fix.View connector →Rapid7 InsightVM / NexposeYour InsightVM vulnerabilities read through the API, or your InsightVM and Nexpose exports imported, turned into fix tracking, host by host.View connector →Microsoft Defender Vulnerability ManagementThe vulnerabilities Defender sees on each machine, software by software, checked against your cases without deploying anything.View connector →CrowdStrike Falcon SpotlightThe open vulnerabilities of every endpoint protected by Falcon, read through the API with a single read scope.View connector →Greenbone / OpenVASYour Greenbone and OpenVAS reports checked against your monitoring, minus known false positives.View connector →TrivyYour Trivy reports uploaded by CI and checked against your cases, on every build.View connector →GrypeYour Grype reports checked against your tracking, with the evidence behind each match.View connector →
Connectors
Plug in your tools in minutes
Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.
Free plan, no credit card · hosted in France