Supported Third-Party Integrations
The following is not supported in Tenable FedRAMP Moderate environments. For more information, see the Tenable FedRAMP Product Offering.
Tenable Exposure Management offers integration with the security tools listed in the following tables.
Each supported integration:
-
Has a dedicated Connector within Tenable Exposure Management with specific configuration options.
-
Can belong to one or more security data sources.
-
Ingests asset data only, both asset and vulnerability data, or third-party threat intelligence that enriches findings, depending on the connector.
Tip: To learn more, see Connectors.Important! On connector creation, it can take up to one hour for connector data to appear within Tenable Exposure Management.
In each table, the Connector Type column indicates whether the integration has a Native connector built specifically for that tool, or whether it's available as a Template connector that you configure through the Tenable One Open Connector.
Security Tools Supported Integrations
The following connectors ingest both asset and weakness data.
|
Connector Name and Documentation |
Category | Ingested Assets | Connector Type |
|---|---|---|---|
| Acunetix360 Connector | DAST | Web Application | Native |
| Acunetix Premium Connector | DAST | Web Application | Native |
| Armis Connector |
Operational Technology (OT)
|
Device |
Native |
| AWS Inspector Connector | CSPM | Cloud Resource | Native |
| BitSight Connector |
DAST |
Device, Web Application |
Native |
| BlackDuck (formerly WhiteHat) Connector | DAST |
Web Application |
Native |
| Bright Connector | DAST | Web Application | Native |
| Cortex XDR Connector | Endpoint Security | Device | Native |
| Claude Code Security in Tenable One Open Connector | SAST | Code Repository | Template |
| Claroty xDome Connector | OT | Device | Native |
| CrowdStrike Connector |
Endpoint Security |
Device |
Native |
| Cycognito Connector | DAST | Device, Web Application | Native |
| Detectify Connector | DAST | Web Application | Native |
| GitHub Code Scanning Connector | SAST, Secret Scanning | Code Repository | Native |
| GitHub Dependabot Connector | SCA | Code Repository | Native |
| GitLab Connector | SAST, SCA, Secret Detection | Code Repository | Native |
| Google SCC in Tenable One Open Connector | CSPM | Cloud Resource | Template |
| Microsoft Defender for Cloud Connector | CSPM | Device, Cloud Resource | Native |
| Microsoft TVM Connector |
Endpoint Security |
Device |
Native |
| Orca Connector |
CSPM CWPP |
Device, Container, Resource |
Native |
| ORDR Connector |
OT Asset Inventory Network Scanner |
Device | Native |
| Outpost 24 Connector | Endpoint Security | Device, Web Application | Native |
| VM (CWPP) | Device, Container | Native | |
| PrismaCloud CSPM Connector | CSPM | Devices, Resources | Native |
| Purplemet Connector | DAST | Web Application | Native |
| Qualys Connector | Endpoint Security | Device | Native |
| Qualys WAS Connector | DAST | Web Application | Native |
| Rapid7 Insight AppSec Connector | DAST | Web Application | Native |
| Rapid7 Insight VM Connector | Endpoint Security |
Device |
Native |
| Rapid7 Insight VM Cloud | Endpoint Security | Device | Native |
| Red Hat Insights Connector | Endpoint Security | Device | Native |
| RiskRecon Connector | DAST | Web Application | Native |
| SecurityScorecard Connector | DAST | Web Application | Native |
| SentinelOne Connector | Endpoint Security |
Device, Other |
Native |
| Snyk Connector | SAST, SCA, IaC | Code Repository, Container | Native |
| Tanium Connector | Endpoint Security |
Device |
Native |
| Tenable One Open Connector |
Not applicable |
Devices, Containers, Resources (Cloud), Web Applications, and Code Repositories |
Native |
| Endpoint Security | Device | Native | |
| Veracode Connector | DAST |
Web Application |
Native |
| SAST | Code Repository | Template | |
| Wiz Vulnerabilities Connector | CWPP (VM) | Device, Container, Resource, Other | Native |
| Wiz Configurations Connector | CSPM | Device, Container, Resource, Other | Native |
| Wiz Issues Connector | ASM | Device, Container, Resource, Other | Native |
Asset Inventory Supported Integrations
The following connectors ingest asset data only.
| Connector Name and Documentation | Ingested Assets | Connector Type |
|---|---|---|
| AWS EC2 Connector | Device | Native |
| Axonius Connector | Device | Native |
| Azure Connector | Device | Native |
| Intune Connector | Device | Native |
| Jamf Pro Connector | Device | Native |
| ServiceNow Connector | Device, Web Application | Native |
Bug Bounty Supported Integrations
The following connectors ingest bug bounty data.
| Connector Name and Documentation | Ingested Assets | Category | Connector Type |
|---|---|---|---|
| HackerOne Connector | Web Application | Bug Bounty | Native |
Threat Intelligence Supported Integrations
The following connectors enrich CVE-based finding data with third-party threat intelligence. No assets are ingested from these connectors.
| Connector Name and Documentation | Ingested Data | Connector Type |
|---|---|---|
| Recorded Future Connector | Data Enrichment on Findings | Native |
Other Integrations
| Connector Name and Documentation |
Usage |
Category | Connector Type |
|---|---|---|---|
| Tenable On-Prem Connector | A secure gateway that lets Tenable Exposure Management reach data sources inside a closed network with no inbound internet access. | On-Prem | Native |
| Tenable One Open Connector |
Security vendors that do not have a native connector in Tenable Exposure Management. |
Custom | Template |