Inventory Columns
In Tenable Attack Surface Management, an inventory is where you view your organization's assets. You can view the inventory details in a table format. Add or remove columns to the inventory table to get specific details of an asset in your inventory.
To configure the columns for the inventory table:
- In the upper-right corner of the Inventory page, click the icon.
A drop-down menu appears.
-
Select Manage Columns.
The Select data types to list page appears with the list of columns that you can enable or disable.
The following table shows the available columns that you can choose and their descriptions.
Column Name | Description |
---|---|
Security | |
SSL/TLS Expiration | Date until the SSL certificate of the asset is valid. |
SSL/TLS Fingerprint | SSL fingerprint of the asset. |
SSL/TLS EV Certificate | States whether the asset has an Extended Validation (EV) certificate. |
SSL/TLS Issuer Country | SSL certificate issuer country. |
SSL/TLS Issuer Organization | SSL certificate issuer organization. |
SSL/TLS Valid From | The date from which the SSL certificate of the asset is valid. |
SSL/TLS Subject Alt Name | SSL subject alternate names of the asset. |
SSL/TLS Cypher Suites | Cypher suites available on the asset. |
SSL/TLS Key Length | Peer certificate RSA bit size. |
SSL/TLS Protocol | SSL protocols used by the asset. |
SSL/TLS error | SSL errors produced by the asset. |
SSL/TLS Serial Number | SSL serial number of the asset. |
Captchas | CAPTCHA software used by the asset. |
Cookie Compliance | Cookie compliance used by the asset. |
Secret Keys | Secret keys used by the asset. |
Login | Whether the asset redirects to or contains a login page. |
JARM Hash | A hash that can be used to group assets having similar SSL configurations. |
Bug Bounty URL | Bug bounty programs that the asset is part of. |
HTTP Response | |
Content type | The type of content served by the asset. |
Content language | The language of content served by the asset. |
Vary | The value of the Vary HTTP header set by the asset. |
Response Header Value | HTTP header values returned by the asset. |
Response Security Header Value | HTTP security header values returned by the asset. |
Sets Cookies | States whether the asset sets cookies or not. |
Content Length | The length of the content served by the asset in bytes. |
Canonical URL | Canonical URL found in the HTML body returned by the asset. |
Response code | The response code returned from the final URL the asset redirects to. |
HTML | Raw response body returned by the asset. |
Document Title | HTML document title. |
Networking | |
Host | Hostname of the asset. |
Record Type | DNS record type of asset. |
Record Value | DNS record value of the asset. |
Redirect Chain | The chain of HTTP or client-side redirects that navigated the system to screenshot.finalurl. |
IP | IP address of the asset. |
Is subdomain | Indicates whether the hostname of the asset is a subdomain or not. |
Final response code | The response code returned from the final URL the asset redirects to. |
ASN | The Autonomous System organization of the asset. |
ASN Number | The Autonomous System Number (ASN) of the asset. |
Final url | The final URL the asset redirects to. |
Domain | Domain name of asset. |
Hosting Provider | Cloud provider of the asset. |
Cloud Hosted | Whether the Asset is cloud-hosted or not. |
Network Devices | Network devices used by the asset. |
Mixed Content | Mixed content returned by the asset. |
Network Storage | Network storage software used by the asset. |
CDN | CDNs used by the asset. |
Remote Access | Remote access software used by the asset. |
Containers | Container software used by the asset. |
SaaS | SaaS solutions used by the asset. |
PaaS | PaaS solutions used by the asset. |
IaaS | IaaS solutions used by the asset. |
Load Balancer | Load Balancers used by the asset. |
Reverse Proxy | Reverse proxies used by the asset. |
Nameservers | DNS nameservers of the asset based on WHOIS data. |
Programming | |
Mobile Frameworks | Mobile frameworks used by the asset. |
Programming Languages | Programming languages used by the asset. |
Web Frameworks | Web frameworks used by the asset. |
Dev Tools | Development tools used by the asset. |
JavaScript Libraries | JavaScript libraries used by the asset. |
JavaScript Frameworks | JavaScript frameworks used by the asset. |
Landing Page Builders | Landing page builders used by the asset. |
Documentation Tools | Documentation tools used by the asset. |
Geolocation | |
Continent | Location of the asset. |
Country | Location of the asset. |
City | Location of the asset. |
Latitude | Location of the asset. |
Longitude | Location of the asset. |
Timezone | Location of the asset. |
Postal | Postal code of the asset. |
In EU | Whether the asset is located in the EU or not. |
Subdivisions | Location of the asset. |
Registered Country | Country where the asset was registered. |
Maps | Maps software used by the asset. |
Services | |
Ports | Ports open on the asset. |
Services | Service running on the asset. |
Banners | Banners returned by services running on the asset. |
CPE | Services running on the asset in Common Platform Enumeration (CPE) format. |
CVE | IDs of CVEs that apply to the asset. |
CVSSv3 Scores | Unique CVSS3 scores that apply to the asset. |
CVSSv3 Vectors | Unique CVSS3 vector strings that apply to the asset. |
Server | Web server running on the asset based on HTTP response headers. |
RBL | Realtime Blackhole Lists (RBL) that contain the asset. |
Web Servers | Web servers running on the asset. |
Email service | Emails used by the asset. |
Web applications | |
Browser fingerprinting | Browser fingerprinting tools. |
Buy now pay later | Buy now pay later tools. |
Cart abandonment | Cart abandonment tools. |
Content curation | Content curation tools. |
Customer data platform | Customer data platform tools. |
Digital asset management | Digital asset management tools. |
Geolocation | Geolocation tools. |
Hosting | Hosting information. |
Loyalty & rewards | Loyalty and rewards tools. |
Performance | Performance tools. |
Referral marketing | Referral marketing tools. |
Reservations & delivery | Reservations and delivery platforms. |
Reviews | |
RUM | Real User Monitoring (RUM) tools. |
Segmentation | Segmentation tools. |
Shipping carriers | Shipping carrier tools. |
Translation | Translation tools. |
Wordpress plugins | WordPress plugin tools. |
Wordpress themes | WordPress theme tools. |
Recruitment & staffing | Recruitment and staffing tools. |
Returns | Returns technologies. |
Livestreaming | Livestreaming tools. |
Ticket booking | Ticket booking tools. |
Augmented reality | Augmented reality tools. |
Cross border ecommerce | Cross-border ecommerce tools. |
Message Boards | Message boards used by the asset. |
CMS | Content Management Systems (CMS) used by the asset. |
Database Managers | Database managers used by the asset. |
Wikis | Wiki software used by the asset. |
Hosting Panels | Hosting panels used by the asset. |
Wordpress Vulnerability IDs | WPScan Vulnerability Database IDs. |
Blogs | Blogging software used by the asset. |
Wordpress Core Version | WordPress Core version. |
WordPress Scanned Plugins | The WordPress scanned plugins that run on the asset. |
Editors | Editor software used by the asset. |
Search Engines | Search engines used by the asset. |
Web Mail | Web mail used by the asset. |
Cryptominer | Cryptomining software used by the asset. |
Static Site Generator | Static site generators used by the asset. |
User Onboarding | User onboarding software used by the asset. |
Document Management Systems | Document management systems used by the asset. |
Control Systems | Control systems used by the asset. |
Issue Trackers | Control systems used by the asset. |
Accessibility | Accessibility libraries used by the asset. |
Appointment scheduling | Appointment scheduling libraries used by the asset. |
LMS | Learning management systems used by the asset. |
Tag Managers | Tag managers used by the asset. |
Data | |
Analytics | Analytics software used by the asset. |
Databases | Databases used by the asset. |
Social | |
Social Profiles | Social profiles used by the asset. |
Live Chat | Live chat software used by the asset. |
Comment Systems | Comment systems used by the asset. |
Social logins | Social logins used by the asset. |
Media | |
Photo Galleries | Photo galleries used by the asset. |
Media Servers | Media servers used by the asset. |
Webcams | Webcam software used by the asset. |
Printers | Printer libraries used by the asset. |
Font Scripts | Font scripts used by the Asset. |
Video Players | Video players used by the asset. |
Rich Text Editors | Rich text editors used by the asset. |
JavaScript Graphics | JavaScript graphics used by the asset. |
Finance | |
Shopify apps | Shopify app tools. |
Ecommerce | Cross-border ecommerce tools. |
Payment Processors | Payment processors used by the asset. |
Paywalls | Paywalls used by the asset. |
Accounting | Accounting systems used by the asset. |
Affiliate programs | Affiliate programs used by the asset. |
Marketing | |
Google Analytics Keys | Referral marketing tools. |
Google Adsense Keys | Google AdSense keys used by the asset. |
Advertising Networks | Advertising networks used by the asset. |
Marketing Automation | Referral marketing tools. |
CRM | Customer relationship management systems used by the asset. |
SEO | Search engine optimization software used by the asset. |
General | |
Widgets | Javascript widgets used by the asset. |
Cache Tools | Cache tools used by the asset. |
Operating Systems | Operating systems used by the asset. |
Web Server Extensions | Web server extensions used by the asset. |
Feed Readers | Feed readers used by the asset. |
Build CI Systems | Build Continuous Integration systems used by the asset. |
Miscellaneous | Miscellaneous software used by the asset. |
Tenable.asm | |
Asset ID | The unique id of the asset. |
Severity | The severity ranking of the asset based on its security risk. |
Added to Inventory | Timestamp of date when the asset was added to the current inventory. |
Tag | IDs of simple Tags associated with the asset. Corresponds with the Tag column on the user interface. |
WHOIS | |
Administrative contact email | Administrative contact email of the asset. |
Administrative contact name | Administrative contact name of the asset. |
Administrative contact organization | Administrative contact organization of the asset. |
Billing contact email | Billing contact email of the asset. |
Contact email | Contact email of the asset. |
Domain name expiration | Age out date of the asset. |
Registrant city | Registrant city of the asset. |
Registrant country | Registrant country of the asset. |
Registrant email | Registrant email of the asset. |
Registrant fax | Registrant fax of the asset. |
Registrant name | Registrant name of the asset. |
Registrant postal code | Registrant postal code of the asset. |
Registrant state | Registrant state of the asset. |
Registrant street | Registrant street of the asset. |