Accessing Tenable One Attack Surface Management in Tenable One Web App Scanning

The data that Tenable One Attack Surface Management discovers is ingested into Tenable One Web App Scanning to enrich asset data within the platform, which in turn can provide potential assessment targets.

To view the assets data:

  • In Tenable One Web App Scanning, go to Applications > Discovered.

    The Discovered table shows Applications which have been discovered by Tenable One Attack Surface Managementt, but not yet scanned by Tenable One Web App Scanning. Once the applications are scanned, they move from Discovered to Scanned.

Integration Characteristics

Tenable One Attack Surface Management and Tenable One Web App Scanning integration has the following characteristics:

  • Real-time data is ingested into Tenable One Web App Scanning.

    Note: Depending on the system load, it may take up to 24 hours for the data to synchronize with Tenable One Web App Scanning.

  • You can configure global settings for network, asset identification, and ingestion filters at the time of integration. Optionally, you can enable or disable ingestion for the current inventory.

  • Data is filtered based on the Ingestion Filters that you provide at the time of integration.

  • Web application assets are created based on Tenable One Attack Surface Management parameters.

  • Tenable One Attack Surface Management ensures that the web application assets data in Tenable One Attack Surface Management and Tenable One Web App Scanning matches completely.

  • Tenable One Attack Surface Management discovered assets are categorized as unlicensed or unscanned assets that are not counted towards your license.

  • The Source column in any applications table show ASM for the assets discovered by Tenable One Attack Surface Management.

  • Tenable One Attack Surface Management adds Screenshots for the web application assets that it discovers: