Skip to main content

Integrated Vulnerability Scanner (Tenable Web App Scanning)

Activation

This is an Add-on, please contact us to activate.

Once activated, you can enable it in the continuous project. read more about continuous projects.

 

Tenable Web App Scanning Integration

1. Authenticating the Integration

Integrating Cyver Core with Tenable Web App Scanning is a very easy process. Just navigate to Administration/Integrations and follow the instructions. 

To generate an API key from Tenable Web App Scanning, follow this link: Generate API Keys. 

To integrate Tenable with your environment, you must provide a valid Access Key and Secret Key. You can link multiple access keys to support tenant-level configurations.

  • Manage Multiple Tenants: You can link multiple access keys. These will be displayed in a grid view for easy management across different tenants.

  • Validation: Upon entering your credentials, the system performs a GET request to the Tenable API.

  • Verification: If the authentication is successful, the newly added keys will appear in your integration list.

2. Configuring the Project Template

Once authenticated, you can enable Tenable for your workflows:

  1. Create a new Continuous Project Template.

  2. Navigate to the Vulnerability Scanner dropdown menu.

  3. Select Tenable Web App Scanning.

Note: This option is only visible if a valid pair of API keys has been successfully linked to your account.

Starting a Scan

Prerequisites

Before initiating a scan within Cyver, ensure the following conditions are met:

  • Existing Scans: You must have pre-configured Scans within your Tenable instance.

  • Target Definitions: Scans will execute against the Targets defined in Tenable, not those set within the Project's Scope.

Execution Steps

  1. Select API Credentials: Go to Project Settings and choose the specific API key required to retrieve your available Tenable Scan.

  2. Select the Scan: Choose the desired Scan from the populated list.

  3. Launch: Once selected, you are authorised to trigger the scan. This initiates an on-demand scan in Tenable for your predefined targets.

 

Schedule and On-demand Scans

You can activate the Schedule Scan for weekly automated scans:

Was this article helpful?