Tenable Vulnerability Management

The Tenable Vulnerability Management connector facilitates seamless integration with Swimlane Turbine, enabling automated vulnerability assessment and prioritization.

Tenable Vulnerability Management is a comprehensive solution for identifying, investigating, and prioritizing vulnerabilities within your IT environment. This connector enables Swimlane Turbine users to integrate Tenable's powerful scanning and reporting capabilities directly into their security workflows. By leveraging this integration, users can automate vulnerability assessments, streamline remediation processes, and enhance their overall security posture with minimal manual intervention.

Prerequisites

To effectively utilize the Tenable Vulnerability Management connector with Swimlane Turbine, ensure you have the following prerequisites:

API Key Authentication with the following parameters:

URL: Endpoint for Tenable API access.

Access Key: Unique identifier for API authentication.

Secret Key: Confidential key paired with the Access Key for secure API calls.

Capabilities

This connector provides the following capabilities:

Check Scan Export Status

Create Report

Create Scan

Download Assets Chunk

Download Exported Scan

Download Report

Download Vulnerabilities Chunk

Export Assets Information

Export Scan

Export Vulnerabilities

Get Asset Details

Get Assets Export Status

Get Folders List

Get Host Details From Scan

Get Plugin Details ... and so on

Asset Setup

The asset for this connector requires the following inputs:

Access Key

Secret Key

For more information on how to get these keys, see Generate API key.

For more information on Workbench Filters, see Workbench Filters.

Notes

For the Get Scan Details task, Tenable archives the vulnerability details if the scan is 40 days or older.

Api Specific Links

List Assets

Get Asset Details

Export Assets Information

Get Assets Export Status

Download Assets Chunk

Get Scans List

Launch Scan

Get Scan Details

Get Scan Status

Export Scan

Check Scan Export Status

Download Exported Scan

Create Scan

Get Host Details From Scan

Get Vulnerabilities ... and so on

Configurations

Tenable.io API Key Authentication

Authenticates using an API Key

Configuration Parameters

Parameter	Description	Type	Required
url	A URL to the target host.	string	Required
access_key	Access key generated by tenable.io API.	string	Required
secret_key	Secret key generated by tenable.io API.	string	Required
verify_ssl	Verify SSL certificate	boolean	Optional
http_proxy	A proxy to route requests through.	string	Optional

Actions

Check Scan Export Status

Checks the export status of a scan in Tenable Vulnerability Management using scan_id and file_id.

Endpoint

URL: scans/{{scan_id}}/export/{{file_id}}/status

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.scan_id	string	Required	The unique identifier for the scan. This identifier can be either the scans.schedule_uuid or the scans.id attribute in the response message from the GET /scans endpoint. Tenable recommends that you use scans.schedule_uuid.
path_parameters.file_id	string	Required	The ID of the file to poll (included in response from /scans//export).

Input Example

{"path_parameters":{"scan_id":"333","file_id":"SSE-4de5371f-34f3-4806-af16-087ad636df63-csv"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
status	string	Status value

Output Example

{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 17:46:30 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"18","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Access-Control-Allow-Origin":"*","X-Request-Uuid":"a5a1cbd867e14f708e21002adc786a9b","Access-Control-Allow-Headers":"Accept, Content-Type, Authorization, X-Request-UUID, X-Client-ID, X-Session-UUID...","Access-Control-Allow-M...

Create report

Generates a detailed PDF report in Tenable Vulnerability Management using a specified template.

Endpoint

URL: reports/export

Method: POST

Input

Argument Name	Type	Required	Description
name	string	Optional	A name for the report. If this parameter is omitted, Tenable Vulnerability Management uses the default name Vulnerabilities_Export_Report with a timestamp in ISO 8601 format appended to the end to create a unique name. For example, Vulnerabilities_Export_Report_2023-11-30T00:23:13.199227748Z.
template_name	string	Optional	The type of template to use for the report. host_vulns_summary—An executive summary report that provides operations teams a snapshot of risk based on vulnerable assets. host_vulns_by_plugins—A report that provides a summary of the plugins that detected vulnerabilities on affected assets. Plugins are sorted by severity and the assets are sorted by the Asset Criticality Rating (ACR). host_vulns_by_assets—A summary of the most vulnerable assets.
filters	array	Optional	A set of filters to apply to the report. Filters can be used to narrow the vulnerabilities or assets included in the report.
filters.property	string	Required	The property to filter the results by.
filters.operator	string	Required	The comparison operator to apply to the filter. For example, eq, neq, gt, etc.
filters.value	array	Required	The value to compare the given property to using the specified operator. Some properties can only be compared to a specific set of values.

Input Example

{"json_body":{"name":"My Summary Report","template_name":"host_vulns_summary","filters":[{"property":"first_found","operator":"gte","value":1701824400000},{"property":"severity","operator":"eq","value":["CRITICAL","HIGH"]}]}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
uuid	string	Unique identifier

Output Example

{"status_code":200,"response_headers":{"Date":"Mon, 03 Feb 2025 06:56:46 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"47","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"757c9907169d14fb9538ff049c8f36e8","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X...

Create Scan

Initiates a new scan in Tenable Vulnerability Management with specific 'uuid' and 'settings'.

Endpoint

URL: scans

Method: POST

Input

Argument Name	Type	Required	Description
uuid	string	Optional	The UUID for the Tenable-provided scan template to use. Use the GET /editor/scan/templates endpoint to find the template UUID.
settings	object	Optional	Parameter for Create Scan
settings.name	string	Required	The name of the scan.
settings.description	string	Optional	The description of the scan.
settings.policy_id	number	Optional	The unique ID of the policy to use to create the scan. Use the GET /policies endpoint to find the policy ID.
settings.folder_id	number	Optional	The unique ID of the folder where you want to store the scan. Use the GET /folders endpoint to find the folder ID.
settings.scanner_id	string	Optional	The unique ID of the scanner to use. Use the GET /scanners endpoint to find the scanner ID.
settings.target_network_uuid	string	Optional	The target network uuid. This field is required if the scanner_id parameter is AUTO-ROUTED.
settings.enabled	boolean	Required	If true, the schedule for the scan is enabled.
settings.launch	string	Optional	When to launch the scan. Possible values are ON_DEMAND, DAILY, WEEKLY, MONTHLY, YEARLY.
settings.scan_time_window	number	Optional	For Nessus agent scans, scan_time_window is the time frame, in minutes, during which agents must transmit scan results to Tenable.io in order to be included in dashboards and reports. If your request omits this parameter, the default value is 180 minutes.For Nessus scanner scans, scan_time_window is the time frame, in minutes, after which the scan will automatically stop. If your request omits this parameter, the default value is 0 and the scan will not stop after a certain time frame.
settings.starttime	string	Optional	For one-time scans, the starting time and date for the scan. For recurrent scans, the first date on which the scan schedule is active and the time that recurring scans launch based on the rrules parameter.
settings.rrules	string	Optional	The interval at which the scan repeats. The interval is formatted as a string of three values delimited by semi-colons. These values are the frequency (FREQ=ONETIME or DAILY or WEEKLY or MONTHLY or YEARLY), the interval (INTERVAL=1 or 2 or 3 ... x), and the days of the week (BYDAY=SU,MO,TU,WE,TH,FR,SA).
settings.timezone	string	Optional	The timezone of the scheduled start time for the scan (as specified in the starttime parameter).
settings.text_targets	string	Optional	The list of targets to scan.
settings.target_groups	array	Optional	An array of target group IDs to scan.
settings.file_targets	string	Optional	The name of a file containing the list of targets to scan.
settings.tag_targets	array	Optional	The list of asset tag identifiers that the scan uses to determine which assets it evaluates.
settings.host_tagging	string	Optional	Creates a unique identifier on hosts scanned using credentials.
settings.agent_group_id	array	Optional	An array of agent group UUIDs to scan. Required if the scan is an agent scan.
settings.agent_scan_launch_type	string	Optional	Indicates whether an agent scan should use the scan window (scheduled) or rule-based (triggered) method for scan launches.
settings.triggers	array	Optional	Describes the scan triggers used when agent_scan_launch_type is set to triggered.
settings.triggers.type	string	Optional	The type of scan launch trigger (periodic or file-exists).
settings.triggers.options	object	Optional	It can be either periodic_hourly_interval or filename parameter depends on the type of scan.
settings.emails	string	Optional	A comma-separated list of accounts that receive the email summary report.

Input Example

{"json_body":{"uuid":"9afd5e49-b4a8-4ab3-8c44-4ed329a505c44e51e1f403febe40","settings":{"name":"test","description":"Test Scan","policy_id":270,"folder_id":8,"scanner_id":"00000000-0000-0000-0000-00000000000000000000000000001","target_network_uuid":"00000000-0000-0000-0000-000000000000","enabled":true,"launch":"ON_DEMAND","scan_time_window":90,"starttime":"20240125T091000","rrules":"FREQ=ONETIME;INTERVAL=1;BYDAY=TH","timezone":"GMT","text_targets":"192.168.0.1","target_groups":[1],"file_targets":"scan_targets.txt","tag_targets":["31e9a613-1b05-40a8-ad42-b05b6715a93a","bfb3bbd0-8dd4-48b4-8f4c-a0053032b3d9"],"host_tagging":"yes","agent_group_id":["0000000-0000-0000-0000-000000000000"],"agent_scan_launch_type":"triggered","triggers":[{"type":"periodic","options":{"periodic_hourly_interval":12,"filename":"upload.txt"}}],"emails":"[email protected]","acls":[{"permissions":16,"owner":0,"display_name":"Analyst Group","name":"Analyst Group","id":1,"type":"group"}]},"credentials":{"add":{"Host":{"Windows":{"domain":"test","username":"test","auth_method":"Password","password":"test"}}}},"plugins":{"Web Servers":{"individual":{"11213":"enabled"}}}}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
scan	object	Output field: scan
scan.tag_type	object	Type of the resource
scan.container_id	string	Unique identifier
scan.owner_uuid	string	Unique identifier
scan.uuid	string	Unique identifier
scan.name	string	Name of the resource
scan.description	object	Output field: scan.description
scan.policy_id	number	Unique identifier
scan.scanner_id	object	Unique identifier
scan.scanner_uuid	string	Unique identifier
scan.emails	object	Output field: scan.emails
scan.sms	string	Output field: scan.sms
scan.enabled	boolean	Output field: scan.enabled
scan.include_aggregate	boolean	Output field: scan.include_aggregate
scan.scan_time_window	object	Output field: scan.scan_time_window
scan.custom_targets	string	Output field: scan.custom_targets
scan.target_network_uuid	object	Unique identifier
scan.auto_routed	number	Output field: scan.auto_routed
scan.remediation	number	Output field: scan.remediation
scan.version	number	Output field: scan.version
scan.triggers	object	Output field: scan.triggers
scan.reporting_mode	object	Output field: scan.reporting_mode
scan.interval_type	object	Type of the resource

Output Example

{"scan":{"tag_type":{},"container_id":"string","owner_uuid":"string","uuid":"12345678-1234-1234-1234-123456789abc","name":"Example Name","description":{},"policy_id":123,"scanner_id":{},"scanner_uuid":"string","emails":{},"sms":"string","enabled":true,"include_aggregate":true,"scan_time_window":{},"custom_targets":"string"}}

Download Assets Chunk

Downloads a specified chunk of exported assets from Tenable Vulnerability Management using export_uuid and chunk_id.

Endpoint

URL: assets/export/{{export_uuid}}/chunks/{{chunk_id}}

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.export_uuid	string	Required	The UUID of the export request.
path_parameters.chunk_id	number	Required	The ID of the asset chunk you want to export.

Input Example

{"path_parameters":{"export_uuid":"194","chunk_id":1}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:31:50 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Cache-Control":"no-store","Content-Encoding":"gzip","X-Request-Uuid":"10b5fcc99897f990a8704...

Download Exported Scan

Retrieve a previously exported scan report from Tenable Vulnerability Management using the provided scan and file IDs.

Endpoint

URL: scans/{{scan_id}}/export/{{file_id}}/download

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.scan_id	string	Required	The unique identifier for the exported scan you want to download. This identifier can be either the scans.schedule_uuid or the scans.id attribute in the response message from the GET /scans endpoint. Tenable recommends that you use scans.schedule_uuid.
path_parameters.file_id	string	Required	The ID of the file to download (Included in response from /scans//export).
headers	object	Required	HTTP headers for the request
headers.accept	string	Required	HTTP headers for the request

Input Example

{"path_parameters":{"scan_id":"311","file_id":"SSE-3f06e801-0175-3e55-1dbd-0cefdfa31565bf36d8be25b21d01-csv"},"headers":{"accept":"application/octet-stream"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
response_text	string	Output field: response_text

Output Example

{"response_text":"string"}

Download report

Downloads a specified PDF report from Tenable Vulnerability Management using the report's unique identifier.

Endpoint

URL: reports/export/{{report_uuid}}/download

Method: GET

Input

Argument Name	Type	Required	Description
headers	object	Optional	HTTP headers for the request
headers.accept	string	Required	The content type to accept.
path_parameters.report_uuid	string	Required	The UUID of the report to download.

Input Example

{"headers":{"accept":"application/pdf"},"path_parameters":{"report_uuid":"4e461c25-600f-4e0a-8735-df85513d6c81"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
file	object	Output field: file
file.file	string	Output field: file.file
file.file_name	string	Name of the resource

Output Example

{"file":{"file":"string","file_name":"Example Name"}}

Download Vulnerabilities Chunk

Downloads a specified chunk of exported vulnerabilities from Tenable using export_uuid and chunk_id, returning a JSON file.

Endpoint

URL: vulns/export/{{export_uuid}}/chunks/{{chunk_id}}

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.export_uuid	string	Required	The UUID of the vulnerability export request.
path_parameters.chunk_id	number	Required	The ID of the chunk you want to export.
headers	object	Required	HTTP headers for the request
headers.accept	string	Required	HTTP headers for the request

Input Example

{"path_parameters":{"export_uuid":"a7cee931-f7c4-408d-be1e-a6da3964a639","chunk_id":1},"headers":{"accept":"application/octet-stream"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
asset	object	Output field: asset
asset.fqdn	string	Output field: asset.fqdn
asset.hostname	string	Name of the resource
asset.uuid	string	Unique identifier
asset.ipv4	string	Output field: asset.ipv4
asset.operating_system	array	Output field: asset.operating_system
asset.network_id	string	Unique identifier
asset.tracked	boolean	Output field: asset.tracked
output	string	Output field: output
plugin	object	Output field: plugin
plugin.cve	array	Output field: plugin.cve
plugin.cvss_base_score	number	Score value
plugin.cvss_temporal_score	number	Score value
plugin.cvss_temporal_vector	object	Output field: plugin.cvss_temporal_vector
plugin.cvss_temporal_vector.exploitability	string	Output field: plugin.cvss_temporal_vector.exploitability
plugin.cvss_temporal_vector.remediation_level	string	Output field: plugin.cvss_temporal_vector.remediation_level
plugin.cvss_temporal_vector.report_confidence	string	Unique identifier
plugin.cvss_temporal_vector.raw	string	Output field: plugin.cvss_temporal_vector.raw
plugin.cvss_vector	object	Output field: plugin.cvss_vector
plugin.cvss_vector.access_complexity	string	Output field: plugin.cvss_vector.access_complexity
plugin.cvss_vector.access_vector	string	Output field: plugin.cvss_vector.access_vector
plugin.cvss_vector.authentication	string	Output field: plugin.cvss_vector.authentication
plugin.cvss_vector.confidentiality_impact	string	Unique identifier

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:30:09 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"b98b82f6c11f66104d7354c69c68bbad","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":"...

Export Assets Information

Exports asset data from Tenable Vulnerability Management based on criteria, with a specified chunk size for the output.

Endpoint

URL: assets/export

Method: POST

Input

Argument Name	Type	Required	Description
chunk_size	number	Optional	Specifies the number of assets per exported chunk.
include_open_ports	boolean	Optional	Specifies whether or not to include open port findings from info-level plugins. If this parameter is omitted, Tenable Vulnerability Management uses a default value of false.
filters	object	Optional	Specifies filters for exported assets.
filters.created_at	number	Optional	Returns all assets created later than the date specified. The specified date must be in the Unix timestamp format.
filters.updated_at	number	Optional	Returns all assets updated later than the date specified. The specified date must be in the Unix timestamp format.
filters.terminated_at	number	Optional	Returns all assets terminated later than the date specified. The specified date must be in the Unix timestamp format.
filters.is_terminated	boolean	Optional	When set to true, returns assets which have any value for the terminated_at attribute.
filters.deleted_at	number	Optional	Returns all assets deleted later than the date specified. The specified date must in the Unix timestamp format.
filters.is_deleted	boolean	Optional	When set to true, returns assets which have any value for the deleted_at attribute.
filters.is_licensed	boolean	Optional	Specifies whether the asset is included in the asset count for the Tenable Vulnerability Management instance. If true, Tenable Vulnerability Management returns only licensed assets. If false, Tenable Vulnerability Management returns only unlicensed assets.
filters.first_scan_time	number	Optional	Returns all assets with a first scan time later than the date specified. The specified date must be in the Unix timestamp format.
filters.last_authenticated_scan_time	number	Optional	Returns all assets with a last credentialed scan time later than the date specified. The specified date must be in the Unix timestamp format.
filters.last_assessed	number	Optional	Returns all assets with a last assessed time later than the date specified.
filters.servicenow_sysid	boolean	Optional	If true, returns all assets that have a ServiceNow Sys ID, regardless of value. If false, returns all assets that do not have a ServiceNow Sys ID.
filters.sources	array	Optional	Returns assets that have the specified asset source. Commonly used names include AWS, NESSUS_AGENT, PVS, NESSUS_SCAN and WAS.
filters.has_plugin_results	boolean	Optional	Filter by whether or not the asset has plugin results associated with it. If true, Tenable Vulnerability Management returns all assets that have plugin results.
filters.network_id	string	Optional	The ID of the network object associated with scanners that identified the assets you want to export.
filters.last_scan_id	string	Optional	Returns all assets that were last scanned by the specified scan configuration UUID.

Input Example

{"json_body":{"chunk_size":10,"include_open_ports":true,"filters":{"created_at":0,"updated_at":0,"terminated_at":0,"is_terminated":false,"deleted_at":0,"is_deleted":false,"is_licensed":false,"first_scan_time":0,"last_authenticated_scan_time":0,"last_assessed":0,"servicenow_sysid":true,"sources":["NESSUS_AGENT","AWS"],"has_plugin_results":true,"network_id":"00000000-0000-0000-0000-000000000000","last_scan_id":"00000000-0000-0000-0000-000000000000"}}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
export_uuid	string	Unique identifier

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:26:12 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"61c516579cc87225ca80e92cbcf97211","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":"...

Export Scan

Exports a specified scan's results from Tenable Vulnerability Management, requiring the scan ID and output format.

Endpoint

URL: scans/{{scan_id}}/export

Method: POST

Input

Argument Name	Type	Required	Description
path_parameters.scan_id	string	Required	The identifier for the scan you want to export. This identifier can be either the scans.schedule_uuid or the scans.id attribute in the response message from the GET /scans endpoint. Tenable recommends that you use scans.schedule_uuid.
parameters.history_id	number	Optional	The unique identifier of the historical data that you want Tenable.io to export. This identifier corresponds to the history.id attribute of the response message from the GET /scans//history endpoint.
parameters.history_uuid	string	Optional	The UUID of the historical data that you want Tenable.io to return. This identifier corresponds to the history.scan_uuid attribute of the response message from the GET /scans//history endpoint.
format	string	Optional	The file format to use (Nessus, HTML, PDF, or CSV).
chapters	string	Optional	The chapters to include in the export. This parameter accepts a semi-colon delimited string comprised of some combination of the following options. (vuln_hosts_summary, vuln_by_host, compliance_exec, remediations, vuln_by_plugin, compliance).
asset_id	string	Optional	The ID of the asset scanned.

Input Example

{"parameters":{"history_id":23,"history_uuid":"00000000-0000-0000-0000-000000000000"},"json_body":{"format":"csv","chapters":"compliance","asset_id":"00000000-0000-0000-0000-000000000000"},"path_parameters":{"scan_id":"311"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
file	string	Output field: file

Output Example

{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 17:44:45 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Vary":"origin","Cache-Control":"no-cache","X-Request-Uuid":"3b4df445cf8b2d6f75e7f0c690bac8f1","X-XSS-Protection":"1; mode=block","X-Frame-Options":"DENY","Strict-Transport-Security":"max-age=63072000; includeSubDomain...

Export Vulnerabilities

Exports a list of vulnerabilities from Tenable based on specified criteria, with the option to define the number of assets.

Endpoint

URL: vulns/export

Method: POST

Input

Argument Name	Type	Required	Description
num_assets	number	Optional	Specifies the number of assets used to chunk the vulnerabilities.
include_unlicensed	boolean	Optional	Specifies whether or not to include unlicensed assets. The default is false when no parameter is specified.
filters	object	Optional	Specifies filters for exported vulnerabilities.
filters.cidr_range	string	Optional	Restricts search for vulnerabilities to assets assigned an IP address within the specified CIDR range.
filters.first_found	number	Optional	Returns vulnerabilities that were first found between the specified date and now. The date must be specified in Unix 10-digit time format (seconds).
filters.indexed_at	number	Optional	Returns vulnerabilities that were indexed into Tenable Vulnerability Management at the specified date. The date must be specified in Unix 10-digit time format (seconds).
filters.last_fixed	number	Optional	Returns vulnerabilities that were fixed between the specified date and now. The date must be specified in Unix 10-digit time format (seconds).
filters.last_found	number	Optional	Returns vulnerabilities that were last found between the specified date and now. The date must be specified in Unix 10-digit time format (seconds).
filters.since	number	Optional	The start date for the range of data you want to export. The date must be specified in Unix 10-digit time format (seconds).
filters.network_id	string	Optional	The ID of the network object associated with scanners that detected the vulnerabilities you want to export.
filters.plugin_family	array	Optional	A list of plugin families for which you want to filter the vulnerabilities returned in the vulnerability export. For a list of supported plugin family values, use the GET /plugins/families endpoint.
filters.plugin_id	array	Optional	A list of plugin IDs for which you want to filter the vulnerabilities returned in the vulnerability export.
filters.plugin_type	string	Optional	The plugin type for which you want to filter the vulnerabilities returned in the vulnerability export. For example, remote, local, combined, etc.
filters.scan_uuid	string	Optional	The UUID of the scan for which you want to filter vulnerabilities returned in the vulnerability export.
filters.severity	array	Optional	The severity of the vulnerabilities to include in the export. Defaults to all severity levels. Supported array values are info, low, medium, high and critical.
filters.severity_modification_type	array	Optional	Returns vulnerabilities with the specified severity modification type. This filter can be used to return vulnerabilities with a modified severity due to a recast or accept rule. Supported case-sensitive values are NONE, RECASTED and ACCEPTED.
filters.state	array	Optional	The state of the vulnerabilities you want the export to include. Supported, case-insensitive values are OPEN(The vulnerability is currently present on a host), REOPENED(The vulnerability was previously marked as fixed on a host, but has returned) and FIXED(The vulnerability was present on a host, but is no longer detected).
filters.source	array	Optional	Returns vulnerabilities identified by the specified source. A source is the entity that reported the vulnerability details.
filters.vpr_score	object	Optional	Returns vulnerabilities with the specified Vulnerability Priority Rating (VPR) score or scores.
filters.vpr_score.eq	array	Optional	Returns vulnerabilities with a VPR equal to the specified score or scores. This property cannot be combined with the following range operators lt, gt, lte, or gte.
filters.vpr_score.neq	array	Optional	Returns vulnerabilities with a VPR not equal to the specified score or scores. This property can be combined with the eq property.
filters.vpr_score.gt	number	Optional	Returns vulnerabilities with a VPR greater than the specified score. This property cannot be combined with the eq property.
filters.vpr_score.gte	number	Optional	Returns vulnerabilities with a VPR greater than or equal to the specified score. This property cannot be combined with the eq property.
filters.vpr_score.lt	number	Optional	Returns vulnerabilities with a VPR lesser than the specified score. This property cannot be combined with the eq property.
filters.vpr_score.lte	number	Optional	Returns vulnerabilities with a VPR lesser than or equal to the specified score. This property cannot be combined with the eq property.

Input Example

{"json_body":{"num_assets":50,"include_unlicensed":true,"filters":{"cidr_range":"0.0.0.0/0","first_found":0,"indexed_at":0,"last_fixed":0,"last_found":0,"since":0,"network_id":"3fa85f64-5717-4562-b3fc-2c963f66afa6","plugin_family":["Backdoors"],"plugin_id":[0],"plugin_type":"remote","scan_uuid":"3fa85f64-5717-4562-b3fc-2c963f66afa6","severity":["low"],"severity_modification_type":["ACCEPTED"],"state":["OPEN"],"source":["AWS"],"vpr_score":{"eq":[0],"neq":[0],"gt":0,"gte":0,"lt":0,"lte":0}}}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
export_uuid	string	Unique identifier

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 09:24:15 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","X-Request-Uuid":"9c71f6b38d372df7fb607052dc20705d","Strict-Transport-Security":...

Get Asset Details

Retrieve detailed information for a specified asset using its unique identifier (UUID) in Tenable Vulnerability Management.

Endpoint

URL: assets/{{asset_uuid}}

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.asset_uuid	string	Required	The UUID of the asset.

Input Example

{"path_parameters":{"asset_uuid":"00fdbc7a-e3e9-42f9-b96b-ef91fbe86f94"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
id	string	Unique identifier
has_agent	boolean	Output field: has_agent
created_at	string	Output field: created_at
updated_at	string	Output field: updated_at
terminated_at	object	Output field: terminated_at
deleted_at	object	Output field: deleted_at
first_seen	string	Output field: first_seen
last_seen	string	Output field: last_seen
last_scan_target	string	Output field: last_scan_target
last_authenticated_scan_date	object	Date value
last_licensed_scan_date	string	Date value
last_scan_id	string	Unique identifier
last_schedule_id	string	Unique identifier
sources	array	Output field: sources
sources.name	string	Name of the resource
sources.first_seen	string	Output field: sources.first_seen
sources.last_seen	string	Output field: sources.last_seen
tags	array	Output field: tags
acr_score	object	Score value
acr_drivers	array	Output field: acr_drivers
acr_drivers.driver_name	string	Name of the resource
acr_drivers.driver_value	array	Value for the parameter
exposure_score	object	Score value

Output Example

{"id":"12345678-1234-1234-1234-123456789abc","has_agent":true,"created_at":"string","updated_at":"string","terminated_at":{},"deleted_at":{},"first_seen":"string","last_seen":"string","last_scan_target":"string","last_authenticated_scan_date":{},"last_licensed_scan_date":"string","last_scan_id":"string","last_schedule_id":"string","sources":[{"name":"Example Name","first_seen":"string","last_seen":"string"}],"tags":["string"]}

Get Assets Export Status

Retrieve the status of a Tenable asset export request using the specified export UUID.

Endpoint

URL: assets/export/{{export_uuid}}/status

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.export_uuid	string	Required	The UUID for the export request.

Input Example

{"path_parameters":{"export_uuid":"194"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
status	string	Status value
chunks_available	array	Output field: chunks_available

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:27:55 GMT","Content-Type":"application/json;charset=utf-8","Content-Length":"43","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"22a7d1c4b1e0fbc505397c99b24660f7","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Accept-Ranges":"bytes","Strict-Trans...

Get Folders List

Retrieve a comprehensive list of default and user-created folders from Tenable Vulnerability Management.

Endpoint

URL: folders

Method: GET

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
folders	array	Output field: folders
folders.id	number	Unique identifier
folders.name	string	Name of the resource
folders.type	string	Type of the resource
folders.custom	number	Output field: folders.custom
folders.unread_count	number	Count value
folders.default_tag	number	Output field: folders.default_tag

Output Example

{"status_code":200,"response_headers":{"Date":"Tue, 21 Mar 2023 06:30:16 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"d1b9a54938eb03610c10e042027aaed8","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":...

Get Host Details From Scan

Retrieve detailed information for a specific host from a scan in Tenable Vulnerability Management using the provided scan_uuid and host_id.

Endpoint

URL: scans/{{scan_uuid}}/hosts/{{host_id}}

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.scan_uuid	string	Required	The identifier for the scan. This identifier can be the either the schedule_uuid or the numeric id attribute for the scan. Recommended to use schedule_uuid.
path_parameters.host_id	number	Required	The ID of the host to retrieve.
parameters.history_id	number	Optional	The unique identifier of the historical data that you want Tenable.io to return.
parameters.history_uuid	string	Optional	The UUID of the historical data that you want Tenable.io to return.

Input Example

{"parameters":{"history_id":23,"history_uuid":"f5fb06b6-3de3-4fb0-b21c-40c24423e77a"},"path_parameters":{"scan_uuid":"840fd26f-9272-4324-9a61-63cd57389b12","host_id":45}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
info	object	Output field: info
info.mac-address	object	Output field: info.mac-address
info.host-fqdn	string	Output field: info.host-fqdn
info.host-ip	string	Output field: info.host-ip
info.operating-system	array	Output field: info.operating-system
info.host_end	string	Output field: info.host_end
info.host_start	string	Output field: info.host_start
vulnerabilities	array	Output field: vulnerabilities
vulnerabilities.count	number	Count value
vulnerabilities.host_id	number	Unique identifier
vulnerabilities.hostname	string	Name of the resource
vulnerabilities.plugin_family	string	Output field: vulnerabilities.plugin_family
vulnerabilities.plugin_id	number	Unique identifier
vulnerabilities.plugin_name	string	Name of the resource
vulnerabilities.severity	number	Output field: vulnerabilities.severity
vulnerabilities.severity_index	number	Output field: vulnerabilities.severity_index
vulnerabilities.vuln_index	number	Output field: vulnerabilities.vuln_index
compliance	array	Output field: compliance
compliance.count	number	Count value
compliance.host_id	number	Unique identifier
compliance.hostname	string	Name of the resource
compliance.plugin_family	string	Output field: compliance.plugin_family
compliance.plugin_id	string	Unique identifier

Output Example

{"status_code":200,"response_headers":{"Date":"Mon, 29 Jan 2024 06:03:33 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Vary":"origin,accept-encoding","Cache-Control":"no-cache","Content-Encoding":"gzip","X-Request-Uuid":"ed50d37af715f50215ad1d9d56be523d","X-XSS-Protection":"1; mode=block","X-Frame-Options":"DENY","Strict-Transport-Sec...

Get Plugin Details

Retrieve detailed information for a specified plugin in Tenable Vulnerability Management using the provided plugin ID.

Endpoint

URL: plugins/plugin/{{id}}

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.id	number	Required	The ID of the plugin.

Input Example

{"path_parameters":{"id":34256}}

Output

Parameter	Type	Description
attributes	array	Output field: attributes
attributes.attribute_value	string	Value for the parameter
attributes.attribute_name	string	Name of the resource
family_name	string	Name of the resource
name	string	Name of the resource
id	number	Unique identifier

Output Example

{"attributes":[{"attribute_value":"aix_IY19744.nasl","attribute_name":"fname"},{"attribute_value":"AIX 5.1 : IY19744","attribute_name":"plugin_name"},{"attribute_value":"$Revision: 1.5 $","attribute_name":"script_version"}],"family_name":"AIX Local Security Checks","name":"AIX 5.1 : IY19744","id":22372}

Get report status

Retrieve the current status of a report export request in Tenable Vulnerability Management using the report's UUID.

Endpoint

URL: reports/export/{{report_uuid}}/status

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.report_uuid	string	Required	The UUID of the report to check the status for.

Input Example

{"path_parameters":{"report_uuid":"4e461c25-600f-4e0a-8735-df85513d6c81"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
status	string	Status value

Output Example

{"status_code":200,"response_headers":{"Date":"Mon, 03 Feb 2025 06:58:36 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"22","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"195b0e5dbe98e89ce5e1b909a9e999a5","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X...

Get Scan Details

Retrieve detailed results for a specific scan in Tenable Vulnerability Management using the provided scan_id.

Endpoint

URL: scans/{{scan_id}}

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.scan_id	string	Required	The unique identifier for the scan you want to retrieve. This identifier can be either the 'scans.schedule_uuid' or the 'scans.id' attribute in the response message from the 'GET /scans' endpoint. Tenable recommends that you use 'scans.schedule_uuid'.
parameters.history_id	string	Optional	The unique identifier of the historical data that you want Tenable.io to return. This identifier corresponds to the 'history.id' attribute of the response message from the 'GET /scans//history' endpoint.

Input Example

{"parameters":{"history_id":"6c568d0d-aaf9-17a6-b780-fcce7082351ca90b6a6b535a0c4c"},"path_parameters":{"scan_id":"0b9317b7-f633-4ca7-b695-8f219bb13f2a"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
info	object	Output field: info
info.owner	string	Output field: info.owner
info.name	string	Name of the resource
info.no_target	boolean	Output field: info.no_target
info.folder_id	number	Unique identifier
info.control	boolean	Output field: info.control
info.user_permissions	number	Output field: info.user_permissions
info.schedule_uuid	string	Unique identifier
info.edit_allowed	boolean	Output field: info.edit_allowed
info.scanner_name	object	Name of the resource
info.policy	object	Output field: info.policy
info.shared	boolean	Output field: info.shared
info.object_id	number	Unique identifier
info.tag_targets	array	Output field: info.tag_targets
info.acls	array	Output field: info.acls
info.acls.permissions	number	Output field: info.acls.permissions
info.acls.owner	number	Output field: info.acls.owner
info.acls.display_name	string	Name of the resource
info.acls.name	string	Name of the resource
info.acls.id	number	Unique identifier
info.acls.type	string	Type of the resource
info.hostcount	number	Count value
info.uuid	string	Unique identifier

Output Example

{"info":{"owner":"string","name":"Example Name","no_target":true,"folder_id":123,"control":true,"user_permissions":123,"schedule_uuid":"string","edit_allowed":true,"scanner_name":{},"policy":{},"shared":true,"object_id":123,"tag_targets":["string"],"acls":[{}],"hostcount":123},"history":[{"history_id":123,"owner_id":123,"creation_date":123,"last_modification_date":123,"uuid":"12345678-1234-1234-1234-123456789abc","type":{},"status":"active","scheduler":123,"alt_targets_used":true,"is_archived":t...

Get Scan Status

Retrieve the latest status of a specific scan from Tenable Vulnerability Management using the unique scan_id.

Endpoint

URL: scans/{{scan_id}}/latest-status

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.scan_id	string	Required	The unique identifier for the scan. This identifier can be either the scans.schedule_uuid or the scans.id attribute in the response message from the GET /scans endpoint.

Input Example

{"path_parameters":{"scan_id":"123"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
status	string	Status value
progress	number	Output field: progress

Output Example

{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 10:49:11 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"34","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"7ad545d3b8b9bf10d0a5384729448460","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-cache","Accept-Ranges":"bytes","Strict-Tran...

Get Scans List

Retrieve a list of scans from Tenable Vulnerability Management with 'CAN VIEW' permissions.

Endpoint

URL: scans

Method: GET

Input

Argument Name	Type	Required	Description
parameters.folder_id	number	Optional	Parameters for the Get Scans List action
parameters.last_modification_date	number	Optional	Parameters for the Get Scans List action

Input Example

{"parameters":{"folder_id":311,"last_modification_date":1633990491}}

Output

Parameter	Type	Description
scans	array	Output field: scans
scans.control	boolean	Output field: scans.control
scans.creation_date	number	Date value
scans.enabled	boolean	Output field: scans.enabled
scans.id	number	Unique identifier
scans.last_modification_date	number	Date value
scans.legacy	boolean	Output field: scans.legacy
scans.name	string	Name of the resource
scans.owner	string	Output field: scans.owner
scans.policy_id	number	Unique identifier
scans.read	boolean	Output field: scans.read
scans.schedule_uuid	string	Unique identifier
scans.shared	boolean	Output field: scans.shared
scans.status	string	Status value
scans.template_uuid	string	Unique identifier
scans.has_triggers	boolean	Output field: scans.has_triggers
scans.type	string	Type of the resource
scans.permissions	number	Output field: scans.permissions
scans.user_permissions	number	Output field: scans.user_permissions
scans.uuid	string	Unique identifier
scans.wizard_uuid	string	Unique identifier
scans.progress	number	Output field: scans.progress
scans.total_targets	number	Output field: scans.total_targets
folders	array	Output field: folders
folders.id	number	Unique identifier

Output Example

{"scans":[],"folders":[],"timestamp":123}

Get Timezones

Obtain a list of timezones supported by Tenable Vulnerability Management for scan scheduling.

Endpoint

URL: scans/timezones

Method: GET

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
timezones	array	Output field: timezones
timezones.name	string	Name of the resource
timezones.value	string	Value for the parameter
timezones.current	boolean	Output field: timezones.current

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 11:38:47 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Cache-Control":"no-store","Pragma":"no-cache","Expires":"0","X-Frame-Options":"DENY","X-Content-Type-Options":"nosniff","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Content-Encoding":"gzip","X-R...

Get Vulnerabilities Export Status

Retrieve the status of a vulnerability export in Tenable Vulnerability Management using the specified export_uuid.

Endpoint

URL: vulns/export/{{export_uuid}}/status

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.export_uuid	string	Required	The UUID for the vulnerability export request.

Input Example

{"path_parameters":{"export_uuid":"a7cee931-f7c4-408d-be1e-a6da3964a639"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
uuid	string	Unique identifier
status	string	Status value
chunks_available	array	Output field: chunks_available
chunks_failed	array	Output field: chunks_failed
chunks_cancelled	array	Output field: chunks_cancelled
total_chunks	number	Output field: total_chunks
chunks_available_count	number	Count value
empty_chunks_count	number	Count value
finished_chunks	number	Output field: finished_chunks
filters	object	Output field: filters
filters.state	array	Output field: filters.state
filters.tags	object	Output field: filters.tags
filters.since	number	Output field: filters.since
filters.first_found	number	Output field: filters.first_found
filters.last_found	number	Output field: filters.last_found
filters.last_fixed	number	Output field: filters.last_fixed
filters.first_seen	number	Output field: filters.first_seen
filters.last_seen	number	Output field: filters.last_seen
filters.indexed_at	number	Output field: filters.indexed_at
filters.indexed_at_end_value	number	Value for the parameter
num_assets_per_chunk	number	Output field: num_assets_per_chunk
created	number	Output field: created

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 09:28:28 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"ab9bcf704507acec0e4e7fba7a868b65","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":...

Launch Scan

Initiates a vulnerability scan in Tenable Vulnerability Management using the provided scan ID.

Endpoint

URL: scans/{{scan_id}}/launch

Method: POST

Input

Argument Name	Type	Required	Description
path_parameters.scan_id	string	Required	The unique identifier of the scan to launch.
alt_targets	array	Optional	Targets which are scanned by Tenable.io instead of the default.
rollover	boolean	Optional	Indicates whether or not to launch a rollover scan instead of full scan. A rollover scan only runs against the targets that Tenable.io did not scan due to a previous scan timeout.

Input Example

{"json_body":{"alt_targets":["test","target"],"rollover":true},"path_parameters":{"scan_id":"840fd26f-9272-4324-9a61-63cd57389b12"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
scan_uuid	string	Unique identifier

Output Example

{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 18:00:53 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Cache-Control":"no-cache","Pragma":"","Expires":"0","X-Frame-Options":"DENY","X-Content-Type-Options":"nosniff","X-Xss-Protection":"1; mode=block","Vary":"origin","X-Request-Uuid":"f17eb317082da50a7cfdb53ca907ef0b","S...

List asset vulnerabilities

Retrieves a list of vulnerabilities for a specified asset in Tenable Vulnerability Management using the asset_id.

Endpoint

URL: /workbenches/assets/{{asset_id}}/vulnerabilities

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.asset_id	string	Required	The UUID of the asset.
parameters.date_range	number	Optional	The number of days of data prior to and including today that should be returned. See README for details.
parameters.filter.0.filter	string	Optional	The name of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.quality	string	Optional	The operator of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.value	string	Optional	The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details.
parameters.filter.search_type	string	Optional	For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details.

Input Example

{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND"},"path_parameters":{"asset_id":"4e461c25-600f-4e0a-8735-df85513d6c81"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
vulnerabilities	array	Output field: vulnerabilities
vulnerabilities.count	number	Count value
vulnerabilities.plugin_family	string	Output field: vulnerabilities.plugin_family
vulnerabilities.plugin_id	number	Unique identifier
vulnerabilities.plugin_name	string	Name of the resource
vulnerabilities.vulnerability_state	string	Output field: vulnerabilities.vulnerability_state
vulnerabilities.vpr_score	number	Score value
vulnerabilities.accepted_count	number	Count value
vulnerabilities.recasted_count	number	Count value
vulnerabilities.counts_by_severity	array	Output field: vulnerabilities.counts_by_severity
vulnerabilities.counts_by_severity.count	number	Count value
vulnerabilities.counts_by_severity.value	number	Value for the parameter
vulnerabilities.severity	number	Output field: vulnerabilities.severity
total_vulnerability_count	number	Count value
total_asset_count	number	Count value

Output Example

{"status_code":200,"response_headers":{"Date":"Thu, 30 Jan 2025 07:41:03 GMT","Content-Type":"application/octet-stream","Content-Length":"0","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"c75dcec9e874bb6b4064535d2aee9a54","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X-Content...

List Assets

Retrieve up to 5,000 assets from Tenable Vulnerability Management for analysis or tracking.

Endpoint

URL: assets

Method: GET

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
assets	array	Output field: assets
assets.id	string	Unique identifier
assets.has_agent	boolean	Output field: assets.has_agent
assets.last_seen	string	Output field: assets.last_seen
assets.last_scan_target	string	Output field: assets.last_scan_target
assets.sources	array	Output field: assets.sources
assets.sources.name	string	Name of the resource
assets.sources.first_seen	string	Output field: assets.sources.first_seen
assets.sources.last_seen	string	Output field: assets.sources.last_seen
assets.acr_score	object	Score value
assets.acr_drivers	array	Output field: assets.acr_drivers
assets.acr_drivers.driver_name	string	Name of the resource
assets.acr_drivers.driver_value	array	Value for the parameter
assets.exposure_score	object	Score value
assets.scan_frequency	array	Output field: assets.scan_frequency
assets.scan_frequency.interval	number	Output field: assets.scan_frequency.interval
assets.scan_frequency.frequency	number	Output field: assets.scan_frequency.frequency
assets.scan_frequency.licensed	boolean	Output field: assets.scan_frequency.licensed
assets.ipv4	array	Output field: assets.ipv4
assets.ipv6	string	Output field: assets.ipv6
assets.fqdn	string	Output field: assets.fqdn
assets.mac_address	array	Output field: assets.mac_address
assets.netbios_name	string	Name of the resource

Output Example

{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 11:27:11 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"15cfff713c2b2ef855947c064dfbf063","Cache-Control":"no-store","Vary":"accept-encoding,origin","Content-Encoding":"gzip","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1...

List assets with vulnerabilities

Retrieve a list of assets along with their associated vulnerabilities from Tenable Vulnerability Management.

Endpoint

URL: workbenches/assets/vulnerabilities

Method: GET

Input

Argument Name	Type	Required	Description
parameters.date_range	number	Optional	The number of days of data prior to and including today that should be returned. See README for details.
parameters.filter.0.filter	string	Optional	The name of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.quality	string	Optional	The operator of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.value	string	Optional	The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details.
parameters.filter.search_type	string	Optional	For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details.

Input Example

{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
assets	array	Output field: assets
assets.id	string	Unique identifier
assets.severities	array	Output field: assets.severities
assets.severities.count	number	Count value
assets.severities.level	number	Output field: assets.severities.level
assets.severities.name	string	Name of the resource
assets.total	number	Output field: assets.total
assets.fqdn	array	Output field: assets.fqdn
assets.ipv4	array	Output field: assets.ipv4
assets.ipv6	array	Output field: assets.ipv6
assets.last_seen	string	Output field: assets.last_seen
assets.netbios_name	array	Name of the resource
assets.agent_name	array	Name of the resource
total_asset_count	number	Count value

Output Example

{"assets":[{"id":"12345678-1234-1234-1234-123456789abc","severities":[],"total":123,"fqdn":[],"ipv4":[],"ipv6":[],"last_seen":"string","netbios_name":[],"agent_name":[]}],"total_asset_count":123}

List Credential Types

Retrieve all supported credential types for managed credentials in Tenable.io.

Endpoint

URL: credentials/types

Method: GET

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
credentials	array	Output field: credentials
credentials.id	string	Unique identifier
credentials.category	string	Output field: credentials.category
credentials.default_expand	boolean	Output field: credentials.default_expand
credentials.types	array	Type of the resource
credentials.types.id	string	Unique identifier
credentials.types.name	string	Name of the resource
credentials.types.max	number	Type of the resource
credentials.types.configuration	array	Type of the resource
credentials.types.configuration.type	string	Type of the resource
credentials.types.configuration.name	string	Name of the resource
credentials.types.configuration.hint	string	Type of the resource
credentials.types.configuration.id	string	Unique identifier
credentials.types.configuration.fileType	string	Type of the resource
credentials.types.configuration.required	boolean	Type of the resource
credentials.types.configuration.default	string	Type of the resource

Output Example

{"status_code":200,"response_headers":{"Date":"Mon, 29 Jan 2024 05:22:37 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Cache-Control":"no-store","Content-Encoding":"gzip","X-Request-Uuid":"818c0a982173a7ae88ac4...

List Plugin Families

Retrieves a comprehensive list of plugin families from Tenable Vulnerability Management.

Endpoint

URL: plugins/families

Method: GET

Input

Argument Name	Type	Required	Description
parameters.all	boolean	Optional	Specifies whether to return all plugin families. If true, the plugin families hidden in Tenable.io UI, for example, Port Scanners, are included in the list.

Input Example

{"parameters":{"all":true}}

Output

Parameter	Type	Description
families	array	Output field: families
families.count	number	Count value
families.name	string	Name of the resource
families.id	number	Unique identifier

Output Example

{"families":[{"count":11342,"name":"AIX Local Security Checks","id":1},{"count":1164,"name":"Amazon Linux Local Security Checks","id":35},{"count":114,"name":"Backdoors","id":17}]}

List Plugins

Retrieve a paginated list of detailed plugin information from Tenable Vulnerability Management.

Endpoint

URL: plugins/plugin

Method: GET

Input

Argument Name	Type	Required	Description
parameters.last_updated	string	Optional	The last updated date to filter on in the YYYY-MM-DD format.
parameters.size	number	Optional	The number of records to include in the result set. Default is 1,000. The maximum size is 10,000.
parameters.page	number	Optional	The index of the page to return relative to the specified page size. For example, to return records 10-19 with page size 10, you must specify page 2. If you omit this parameter, Tenable.io applies the default value of 1.

Input Example

{"parameters":{"last_updated":"2023-04-13","size":1000,"page":10}}

Output

Parameter	Type	Description
data	object	Response data
data.plugin_details	array	Response data
data.plugin_details.id	number	Response data
data.plugin_details.name	string	Response data
data.plugin_details.attributes	object	Response data
data.plugin_details.attributes.plugin_modification_date	string	Response data
data.plugin_details.attributes.plugin_version	string	Response data
data.plugin_details.attributes.exploited_by_malware	boolean	Response data
data.plugin_details.attributes.description	string	Response data
data.plugin_details.attributes.unsupported_by_vendor	boolean	Response data
data.plugin_details.attributes.cvss_temporal_score	number	Response data
data.plugin_details.attributes.patch_publication_date	string	Response data
data.plugin_details.attributes.see_also	array	Response data
data.plugin_details.attributes.default_account	boolean	Response data
data.plugin_details.attributes.exploit_available	boolean	Response data
data.plugin_details.attributes.exploit_framework_canvas	boolean	Response data
data.plugin_details.attributes.cvss_base_score	number	Response data
data.plugin_details.attributes.solution	string	Response data
data.plugin_details.attributes.exploit_framework_exploithub	boolean	Response data
data.plugin_details.attributes.cpe	array	Response data
data.plugin_details.attributes.plugin_publication_date	string	Response data
data.plugin_details.attributes.exploit_framework_core	boolean	Response data
data.plugin_details.attributes.in_the_news	boolean	Response data
data.plugin_details.attributes.has_patch	boolean	Response data
data.plugin_details.attributes.xref	array	Response data

Output Example

{"data":{"plugin_details":[{},{},{}]},"size":1000,"params":{"page":3,"size":1000,"last_updated":"2018-01-01"},"total_count":75621}

List Plugins in Family

Retrieve a list of plugins within a specified family from Tenable Vulnerability Management using the family ID.

Endpoint

URL: plugins/families/{{id}}

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.id	number	Required	The ID of the family to lookup.

Input Example

{"path_parameters":{"id":34256}}

Output

Parameter	Type	Description
plugins	array	Output field: plugins
plugins.id	number	Unique identifier
plugins.name	string	Name of the resource
name	string	Name of the resource
id	number	Unique identifier

Output Example

{"plugins":[{"id":22372,"name":"AIX 5.1 : IY19744"},{"id":22373,"name":"AIX 5.1 : IY20486"},{"id":22374,"name":"AIX 5.1 : IY21309"}],"name":"AIX Local Security Checks","id":1}

List Policies

Retrieves a comprehensive list of scan policies available in Tenable Vulnerability Management.

Endpoint

URL: policies

Method: GET

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
policies	array	Output field: policies
policies.no_target	string	Output field: policies.no_target
policies.template_uuid	string	Unique identifier
policies.description	object	Output field: policies.description
policies.name	string	Name of the resource
policies.owner	string	Output field: policies.owner
policies.visibility	string	Output field: policies.visibility
policies.shared	number	Output field: policies.shared
policies.user_permissions	number	Output field: policies.user_permissions
policies.last_modification_date	number	Date value
policies.creation_date	number	Date value
policies.owner_id	number	Unique identifier
policies.id	number	Unique identifier

Output Example

{"policies":[{"no_target":"string","template_uuid":"string","description":{},"name":"Example Name","owner":"string","visibility":"string","shared":123,"user_permissions":123,"last_modification_date":123,"creation_date":123,"owner_id":123,"id":123}]}

List Scanners

Retrieve all available scanners from Tenable Vulnerability Management to track and analyze assets.

Endpoint

URL: scanners

Method: GET

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
scanners	array	Output field: scanners
scanners.creation_date	number	Date value
scanners.group	boolean	Output field: scanners.group
scanners.id	number	Unique identifier
scanners.key	string	Output field: scanners.key
scanners.last_connect	number	Output field: scanners.last_connect
scanners.last_modification_date	number	Date value
scanners.license	object	Output field: scanners.license
scanners.license.record_id	string	Unique identifier
scanners.license.type	string	Type of the resource
scanners.license.activation_code	string	Output field: scanners.license.activation_code
scanners.license.agents	number	Output field: scanners.license.agents
scanners.license.ips	number	Output field: scanners.license.ips
scanners.license.scanners	number	Output field: scanners.license.scanners
scanners.license.users	number	Output field: scanners.license.users
scanners.license.enterprise_pause	boolean	Output field: scanners.license.enterprise_pause
scanners.license.expiration_date	number	Date value
scanners.license.evaluation	boolean	Output field: scanners.license.evaluation
scanners.license.apps	object	Output field: scanners.license.apps
scanners.license.apps.pci	object	Output field: scanners.license.apps.pci
scanners.license.apps.pci.mode	string	Output field: scanners.license.apps.pci.mode
scanners.license.apps.vm	object	Output field: scanners.license.apps.vm
scanners.license.apps.vm.assets	number	Output field: scanners.license.apps.vm.assets

Output Example

{"scanners":[{"creation_date":123,"group":true,"id":123,"key":"string","last_connect":123,"last_modification_date":123,"license":{},"linked":123,"name":"Example Name","network_name":"Example Name","num_scans":123,"owner":"string","owner_id":123,"owner_name":"Example Name","owner_uuid":"string"}]}

Retrieve a list of tag values from Tenable Vulnerability Management for categorization and analysis.

Endpoint

URL: tags/values

Method: GET

Input

Argument Name	Type	Required	Description
parameters.f	string	Optional	A filter condition in the field:operator:value format, for example, f=value:match:rhel. Filters should match field:op:value format.
parameters.ft	string	Optional	If multiple f parameters are present, specifies whether Tenable Vulnerability Management applies AND or OR to conditions. Supported values are and and or. If you omit this parameter when using multiple f parameters, Tenable Vulnerability Management applies AND by default.
parameters.wf	string	Optional	A comma-separated list of fields to include in the wildcard search. Provides the same functionality as a match condition in the f in parameter. For example, f=value:match:Chi returns the same results as wf=value&w=Chi. Wildcard fields include category_name, value, description. Use the w parameter to specify the search value.
parameters.w	string	Optional	A single search value for the wildcard fields specified in the wf parameter.
parameters.limit	number	Optional	The number of records to retrieve. If this parameter is omitted.
parameters.offset	number	Optional	The starting record to retrieve. If this parameter is omitted.
parameters.sort	string	Optional	The field you want to use to sort the results by along with the sort order. The field is specified first, followed by a colon, and the order is specified second (asc or desc). For example, value:desc would sort results by the value field in descending order. If you specify multiple fields, the fields must be separated by commas. For example, value:desc,updated_at:asc would first sort results by the value field in descending order and then by the updated_at field in ascending order.

Input Example

{"parameters":{"f":"value:match:test","ft":"tag","wf":"f=category_name:match:Chi","w":"category_name","limit":5000,"offset":0,"sort":"category_name:desc"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
values	array	Value for the parameter
values.uuid	string	Unique identifier
values.created_at	string	Value for the parameter
values.created_by	string	Value for the parameter
values.updated_at	string	Value for the parameter
values.updated_by	string	Value for the parameter
values.category_uuid	string	Unique identifier
values.value	string	Value for the parameter
values.description	string	Value for the parameter
values.type	string	Type of the resource
values.category_name	string	Name of the resource
values.category_description	string	Value for the parameter
values.access_control	object	Value for the parameter
values.access_control.version	number	Value for the parameter
values.access_control.current_user_permissions	array	Value for the parameter
pagination	object	Output field: pagination
pagination.offset	number	Output field: pagination.offset
pagination.limit	number	Output field: pagination.limit
pagination.total	number	Output field: pagination.total
pagination.sort	array	Output field: pagination.sort
pagination.sort.name	string	Name of the resource
pagination.sort.order	string	Output field: pagination.sort.order

Output Example

{"status_code":200,"response_headers":{"Date":"Mon, 03 Feb 2025 07:00:39 GMT","Content-Type":"application/pdf","Content-Length":"44830","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Content-Disposition":"attachment; filename*=UTF-8''My+Summary+Report.pdf","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"...

List Templates

Retrieve Tenable-provided scan templates by specifying the template type. Requires 'type' as a path parameter.

Endpoint

URL: editor/{{type}}/templates

Method: GET

Input

Argument Name	Type	Required	Description
path_parameters.type	string	Required	The type of templates to retrieve (scan, policy, or remediation).

Input Example

{"path_parameters":{"type":"scan"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
templates	array	Output field: templates
templates.unsupported	boolean	Output field: templates.unsupported
templates.cloud_only	boolean	Output field: templates.cloud_only
templates.desc	string	Output field: templates.desc
templates.order	number	Output field: templates.order
templates.subscription_only	boolean	Output field: templates.subscription_only
templates.is_was	object	Output field: templates.is_was
templates.title	string	Output field: templates.title
templates.is_agent	object	Output field: templates.is_agent
templates.uuid	string	Unique identifier
templates.icon	string	Output field: templates.icon
templates.manager_only	boolean	Output field: templates.manager_only
templates.name	string	Name of the resource

Output Example

{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 11:23:56 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Cache-Control":"no-store","Pragma":"no-cache","Expires":"0","X-Frame-Options":"DENY","X-Content-Type-Options":"nosniff","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Content-Encoding":"gzip","X-R...

List vulnerabilities

Retrieve a comprehensive list of vulnerabilities recorded by Tenable Vulnerability Management.

Endpoint

URL: workbenches/vulnerabilities

Method: GET

Input

Argument Name	Type	Required	Description
parameters.date_range	number	Optional	The number of days of data prior to and including today that should be returned. See README for details.
parameters.filter.0.filter	string	Optional	The name of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.quality	string	Optional	The operator of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.value	string	Optional	The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details.
parameters.filter.search_type	string	Optional	For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details.

Input Example

{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
vulnerabilities	array	Output field: vulnerabilities
vulnerabilities.count	number	Count value
vulnerabilities.plugin_family	string	Output field: vulnerabilities.plugin_family
vulnerabilities.plugin_id	number	Unique identifier
vulnerabilities.plugin_name	string	Name of the resource
vulnerabilities.vulnerability_state	string	Output field: vulnerabilities.vulnerability_state
vulnerabilities.severity	number	Output field: vulnerabilities.severity
vulnerabilities.accepted_count	number	Count value
vulnerabilities.recasted_count	number	Count value
vulnerabilities.counts_by_severity	array	Output field: vulnerabilities.counts_by_severity
vulnerabilities.counts_by_severity.count	number	Count value
vulnerabilities.counts_by_severity.value	number	Value for the parameter
vulnerabilities.cvss_base_score	number	Score value
vulnerabilities.cvss3_base_score	number	Score value
vulnerabilities.vpr_score	number	Score value
total_vulnerability_count	number	Count value
total_asset_count	number	Count value

Output Example

{"status_code":200,"response_headers":{"Date":"Thu, 30 Jan 2025 07:38:11 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Vary":"origin,accept-encoding","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X-Content-Type-Options":"nosn...

List workbench assets

Retrieve a comprehensive list of assets from Tenable Vulnerability Management for analysis and reporting.

Endpoint

URL: workbenches/assets

Method: GET

Input

Argument Name	Type	Required	Description
parameters.date_range	number	Optional	The number of days of data prior to and including today that should be returned. See README for details.
parameters.filter.0.filter	string	Optional	The name of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.quality	string	Optional	The operator of the filter to apply to the exported scan report. See README for details.
parameters.filter.0.value	string	Optional	The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details.
parameters.filter.search_type	string	Optional	For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details.
parameters.all_fields	string	Optional	A value specifying whether you want the returned data to include all fields (full) or only the default fields (default). See README for details.

Input Example

{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND","all_fields":"full"}}

Output

Parameter	Type	Description
status_code	number	HTTP status code of the response
reason	string	Response reason phrase
assets	array	Output field: assets
assets.id	string	Unique identifier
assets.has_agent	boolean	Output field: assets.has_agent
assets.last_seen	string	Output field: assets.last_seen
assets.last_scan_target	string	Output field: assets.last_scan_target
assets.sources	array	Output field: assets.sources
assets.sources.name	string	Name of the resource
assets.sources.first_seen	string	Output field: assets.sources.first_seen
assets.sources.last_seen	string	Output field: assets.sources.last_seen
assets.ipv4	array	Output field: assets.ipv4
assets.ipv6	string	Output field: assets.ipv6
assets.fqdn	array	Output field: assets.fqdn
assets.netbios_name	string	Name of the resource
assets.operating_system	array	Output field: assets.operating_system
assets.agent_name	string	Name of the resource
assets.aws_ec2_name	string	Name of the resource
assets.mac_address	string	Output field: assets.mac_address
assets.bigfix_asset_id	string	Unique identifier
assets.acr_score	number	Score value
assets.acr_drivers	array	Output field: assets.acr_drivers
assets.acr_drivers.driver_name	string	Name of the resource
assets.acr_drivers.driver_value	array	Value for the parameter
assets.exposure_score	number	Score value

Output Example

{"status_code":200,"response_headers":{"Date":"Mon, 10 Feb 2025 06:14:18 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"21421b6e91003b5601030f73ac735572","Cache-Control":"no-store","Vary":"accept-encoding,origin","Accept-Ranges":"bytes","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options"...

Response Headers

Header	Description	Example
Accept-Ranges	HTTP response header: Accept-Ranges	bytes
Access-Control-Allow-Headers	HTTP response header: Access-Control-Allow-Headers	Accept, Content-Type, Authorization, X-Request-UUID, X-Client-ID, X-Session-UUID, X-Container-UUID, X-User-UUID
Access-Control-Allow-Methods	HTTP response header: Access-Control-Allow-Methods	GET, POST, DELETE, PUT
Access-Control-Allow-Origin	HTTP response header: Access-Control-Allow-Origin	*
Cache-Control	Directives for caching mechanisms	no-cache
CF-Cache-Status	HTTP response header: CF-Cache-Status	DYNAMIC
CF-RAY	HTTP response header: CF-RAY	84a7f22a48d08558-BOM
Connection	HTTP response header: Connection	keep-alive
Content-Disposition	HTTP response header: Content-Disposition	attachment; filename=0__11.11.11.100.csv
Content-Encoding	HTTP response header: Content-Encoding	gzip
Content-Length	The length of the response body in bytes	18
Content-Security-Policy-Report-Only	HTTP response header: Content-Security-Policy-Report-Only	script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=B_B6soD7YGzYAlUFBsUvlk1mMyliAFfjZDi7BHtB0es-1706009231-1-AaCzdDNhnWB_73_h-4uIj09q4RXvysGREuCt-7NhBb6sMKp7-IgGwS94-K6DgQK4hRvaBE2k47mzDHC9Dtj_YWohaI_bJCp5EGVLnzZzRqVsHcMTcaR6Sk-o9jF-d6AZu_NBD2HyE9yaMkt46clOSa05bgN-Kd3auXDs2ScYN-p0; report-to cf-csp-endpoint
Content-Type	The media type of the resource	application/json; charset=utf-8
Date	The date and time at which the message was originated	Wed, 24 Jan 2024 11:30:43 GMT
Expect-CT	HTTP response header: Expect-CT	enforce, max-age=86400
Expires	The date/time after which the response is considered stale	0
NEL	HTTP response header: NEL	{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Pragma	HTTP response header: Pragma	no-cache
Referrer-Policy	HTTP response header: Referrer-Policy	strict-origin-when-cross-origin
Report-To	HTTP response header: Report-To	{"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v3?s=81Kwazs1p5YGYVqautNdKNSUe7kIy76hWBBDLunHUSeZ08dRnTxLyl5RyeOaci0jrqM9e1Ry8z9FjY6KGbCTZVTG72TsxUWjBRudQcrY9RpF9OstYyZ6de7SDDlVqqC8i7Ul"}],"group":"cf-nel","max_age":604800}
Server	Information about the software used by the origin server	cloudflare
Server-Timing	HTTP response header: Server-Timing	cf-q-config;dur=6.0000002122251e-06
Set-Cookie	HTTP response header: Set-Cookie	nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure
Strict-Transport-Security	HTTP response header: Strict-Transport-Security	max-age=63072000; includeSubDomains
Transfer-Encoding	HTTP response header: Transfer-Encoding	chunked
Vary	HTTP response header: Vary	accept-encoding,origin
X-Content-Type-Options	HTTP response header: X-Content-Type-Options	nosniff
X-Download-Options	HTTP response header: X-Download-Options	noopen
X-Frame-Options	HTTP response header: X-Frame-Options	DENY
X-Gateway-Site-ID	HTTP response header: X-Gateway-Site-ID	service-nginx-router-ap-south-1-prod-dc984846c-jc6vl
X-Request-Uuid	HTTP response header: X-Request-Uuid	22a7d1c4b1e0fbc505397c99b24660f7
X-Xss-Protection	HTTP response header: X-Xss-Protection	1; mode=block