--- title: Tenable Vulnerability Management slug: connectors/tenable-vulnerability-management docTags: createdAt: 2026-06-09T16:30:25.673Z --- The Tenable Vulnerability Management connector facilitates seamless integration with Swimlane Turbine, enabling automated vulnerability assessment and prioritization. Tenable Vulnerability Management is a comprehensive solution for identifying, investigating, and prioritizing vulnerabilities within your IT environment. This connector enables Swimlane Turbine users to integrate Tenable's powerful scanning and reporting capabilities directly into their security workflows. By leveraging this integration, users can automate vulnerability assessments, streamline remediation processes, and enhance their overall security posture with minimal manual intervention. ## Prerequisites To effectively utilize the Tenable Vulnerability Management connector with Swimlane Turbine, ensure you have the following prerequisites: - API Key Authentication with the following parameters: - URL: Endpoint for Tenable API access. - Access Key: Unique identifier for API authentication. - Secret Key: Confidential key paired with the Access Key for secure API calls. ## Capabilities This connector provides the following capabilities: - Check Scan Export Status - Create Report - Create Scan - Download Assets Chunk - Download Exported Scan - Download Report - Download Vulnerabilities Chunk - Export Assets Information - Export Scan - Export Vulnerabilities - Get Asset Details - Get Assets Export Status - Get Folders List - Get Host Details From Scan - Get Plugin Details *... and so on* ## Asset Setup The asset for this connector requires the following inputs: - Access Key - Secret Key For more information on how to get these keys, see [Generate API key](https://docs.tenable.com/tenableio/Content/Settings/GenerateAPIKey.htm). For more information on Workbench Filters, see [Workbench Filters](https://developer.tenable.com/docs/workbench-filters). ## Notes For the Get Scan Details task, Tenable archives the vulnerability details if the scan is 40 days or older. ## Api Specific Links - [List Assets](https://developer.tenable.com/reference/assets-list-assets) - [Get Asset Details](https://developer.tenable.com/reference/assets-asset-info) - [Export Assets Information](https://developer.tenable.com/reference/exports-assets-request-export) - [Get Assets Export Status](https://developer.tenable.com/reference/exports-assets-export-status) - [Download Assets Chunk](https://developer.tenable.com/reference/exports-assets-download-chunk) - [Get Scans List](https://developer.tenable.com/reference/scans-list) - [Launch Scan](https://developer.tenable.com/reference/scans-launch) - [Get Scan Details](https://developer.tenable.com/reference/scans-details) - [Get Scan Status](https://developer.tenable.com/reference/scans-get-latest-status) - [Export Scan](https://developer.tenable.com/reference/scans-export-request) - [Check Scan Export Status](https://developer.tenable.com/reference/scans-export-status) - [Download Exported Scan](https://developer.tenable.com/reference/scans-export-download) - [Create Scan](https://developer.tenable.com/reference/scans-create) - [Get Host Details From Scan](https://developer.tenable.com/reference/scans-host-details) - [Get Vulnerabilities](https://developer.tenable.com/reference/exports-vulns-request-export) *... and so on* # Configurations ## Tenable.io API Key Authentication Authenticates using an API Key ### Configuration Parameters | **Parameter** | **Description** | **Type** | **Required** | | ------------- | --------------------------------------- | -------- | ------------ | | url | A URL to the target host. | string | Required | | access\_key | Access key generated by tenable.io API. | string | Required | | secret\_key | Secret key generated by tenable.io API. | string | Required | | verify\_ssl | Verify SSL certificate | boolean | Optional | | http\_proxy | A proxy to route requests through. | string | Optional | # Actions ## Check Scan Export Status Checks the export status of a scan in Tenable Vulnerability Management using scan\_id and file\_id. ### Endpoint - **URL:** `scans/{{scan_id}}/export/{{file_id}}/status` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------- | -------- | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.scan_id` | string | Required | The unique identifier for the scan. This identifier can be either the scans.schedule\_uuid or the scans.id attribute in the response message from the GET /scans endpoint. Tenable recommends that you use scans.schedule\_uuid. | | `path_parameters.file_id` | string | Required | The ID of the file to poll (included in response from /scans//export). | ### Input Example `{"path_parameters":{"scan_id":"333","file_id":"SSE-4de5371f-34f3-4806-af16-087ad636df63-csv"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `status` | string | Status value | ### Output Example `{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 17:46:30 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"18","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Access-Control-Allow-Origin":"*","X-Request-Uuid":"a5a1cbd867e14f708e21002adc786a9b","Access-Control-Allow-Headers":"Accept, Content-Type, Authorization, X-Request-UUID, X-Client-ID, X-Session-UUID...","Access-Control-Allow-M...` ## Create report Generates a detailed PDF report in Tenable Vulnerability Management using a specified template. ### Endpoint - **URL:** `reports/export` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------ | -------- | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `name` | string | Optional | A name for the report. If this parameter is omitted, Tenable Vulnerability Management uses the default name Vulnerabilities\_Export\_Report with a timestamp in ISO 8601 format appended to the end to create a unique name. For example, Vulnerabilities\_Export\_Report\_2023-11-30T00:23:13.199227748Z. | | `template_name` | string | Optional | The type of template to use for the report. host\_vulns\_summary—An executive summary report that provides operations teams a snapshot of risk based on vulnerable assets. host\_vulns\_by\_plugins—A report that provides a summary of the plugins that detected vulnerabilities on affected assets. Plugins are sorted by severity and the assets are sorted by the Asset Criticality Rating (ACR). host\_vulns\_by\_assets—A summary of the most vulnerable assets. | | `filters` | array | Optional | A set of filters to apply to the report. Filters can be used to narrow the vulnerabilities or assets included in the report. | | `filters.property` | string | Required | The property to filter the results by. | | `filters.operator` | string | Required | The comparison operator to apply to the filter. For example, eq, neq, gt, etc. | | `filters.value` | array | Required | The value to compare the given property to using the specified operator. Some properties can only be compared to a specific set of values. | ### Input Example `{"json_body":{"name":"My Summary Report","template_name":"host_vulns_summary","filters":[{"property":"first_found","operator":"gte","value":1701824400000},{"property":"severity","operator":"eq","value":["CRITICAL","HIGH"]}]}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `uuid` | string | Unique identifier | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 03 Feb 2025 06:56:46 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"47","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"757c9907169d14fb9538ff049c8f36e8","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X...` ## Create Scan Initiates a new scan in Tenable Vulnerability Management with specific 'uuid' and 'settings'. ### Endpoint - **URL:** `scans` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------------------- | -------- | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `uuid` | string | Optional | The UUID for the Tenable-provided scan template to use. Use the GET /editor/scan/templates endpoint to find the template UUID. | | `settings` | object | Optional | Parameter for Create Scan | | `settings.name` | string | Required | The name of the scan. | | `settings.description` | string | Optional | The description of the scan. | | `settings.policy_id` | number | Optional | The unique ID of the policy to use to create the scan. Use the GET /policies endpoint to find the policy ID. | | `settings.folder_id` | number | Optional | The unique ID of the folder where you want to store the scan. Use the GET /folders endpoint to find the folder ID. | | `settings.scanner_id` | string | Optional | The unique ID of the scanner to use. Use the GET /scanners endpoint to find the scanner ID. | | `settings.target_network_uuid` | string | Optional | The target network uuid. This field is required if the scanner\_id parameter is AUTO-ROUTED. | | `settings.enabled` | boolean | Required | If true, the schedule for the scan is enabled. | | `settings.launch` | string | Optional | When to launch the scan. Possible values are ON\_DEMAND, DAILY, WEEKLY, MONTHLY, YEARLY. | | `settings.scan_time_window` | number | Optional | For Nessus agent scans, scan\_time\_window is the time frame, in minutes, during which agents must transmit scan results to Tenable.io in order to be included in dashboards and reports. If your request omits this parameter, the default value is 180 minutes.For Nessus scanner scans, scan\_time\_window is the time frame, in minutes, after which the scan will automatically stop. If your request omits this parameter, the default value is 0 and the scan will not stop after a certain time frame. | | `settings.starttime` | string | Optional | For one-time scans, the starting time and date for the scan. For recurrent scans, the first date on which the scan schedule is active and the time that recurring scans launch based on the rrules parameter. | | `settings.rrules` | string | Optional | The interval at which the scan repeats. The interval is formatted as a string of three values delimited by semi-colons. These values are the frequency (FREQ=ONETIME or DAILY or WEEKLY or MONTHLY or YEARLY), the interval (INTERVAL=1 or 2 or 3 ... x), and the days of the week (BYDAY=SU,MO,TU,WE,TH,FR,SA). | | `settings.timezone` | string | Optional | The timezone of the scheduled start time for the scan (as specified in the starttime parameter). | | `settings.text_targets` | string | Optional | The list of targets to scan. | | `settings.target_groups` | array | Optional | An array of target group IDs to scan. | | `settings.file_targets` | string | Optional | The name of a file containing the list of targets to scan. | | `settings.tag_targets` | array | Optional | The list of asset tag identifiers that the scan uses to determine which assets it evaluates. | | `settings.host_tagging` | string | Optional | Creates a unique identifier on hosts scanned using credentials. | | `settings.agent_group_id` | array | Optional | An array of agent group UUIDs to scan. Required if the scan is an agent scan. | | `settings.agent_scan_launch_type` | string | Optional | Indicates whether an agent scan should use the scan window (scheduled) or rule-based (triggered) method for scan launches. | | `settings.triggers` | array | Optional | Describes the scan triggers used when agent\_scan\_launch\_type is set to triggered. | | `settings.triggers.type` | string | Optional | The type of scan launch trigger (periodic or file-exists). | | `settings.triggers.options` | object | Optional | It can be either periodic\_hourly\_interval or filename parameter depends on the type of scan. | | `settings.emails` | string | Optional | A comma-separated list of accounts that receive the email summary report. | ### Input Example `{"json_body":{"uuid":"9afd5e49-b4a8-4ab3-8c44-4ed329a505c44e51e1f403febe40","settings":{"name":"test","description":"Test Scan","policy_id":270,"folder_id":8,"scanner_id":"00000000-0000-0000-0000-00000000000000000000000000001","target_network_uuid":"00000000-0000-0000-0000-000000000000","enabled":true,"launch":"ON_DEMAND","scan_time_window":90,"starttime":"20240125T091000","rrules":"FREQ=ONETIME;INTERVAL=1;BYDAY=TH","timezone":"GMT","text_targets":"192.168.0.1","target_groups":[1],"file_targets":"scan_targets.txt","tag_targets":["31e9a613-1b05-40a8-ad42-b05b6715a93a","bfb3bbd0-8dd4-48b4-8f4c-a0053032b3d9"],"host_tagging":"yes","agent_group_id":["0000000-0000-0000-0000-000000000000"],"agent_scan_launch_type":"triggered","triggers":[{"type":"periodic","options":{"periodic_hourly_interval":12,"filename":"upload.txt"}}],"emails":"test1@test.com","acls":[{"permissions":16,"owner":0,"display_name":"Analyst Group","name":"Analyst Group","id":1,"type":"group"}]},"credentials":{"add":{"Host":{"Windows":{"domain":"test","username":"test","auth_method":"Password","password":"test"}}}},"plugins":{"Web Servers":{"individual":{"11213":"enabled"}}}}}` ### Output | **Parameter** | **Type** | **Description** | | -------------------------- | -------- | ------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `scan` | object | Output field: scan | | `scan.tag_type` | object | Type of the resource | | `scan.container_id` | string | Unique identifier | | `scan.owner_uuid` | string | Unique identifier | | `scan.uuid` | string | Unique identifier | | `scan.name` | string | Name of the resource | | `scan.description` | object | Output field: scan.description | | `scan.policy_id` | number | Unique identifier | | `scan.scanner_id` | object | Unique identifier | | `scan.scanner_uuid` | string | Unique identifier | | `scan.emails` | object | Output field: scan.emails | | `scan.sms` | string | Output field: scan.sms | | `scan.enabled` | boolean | Output field: scan.enabled | | `scan.include_aggregate` | boolean | Output field: scan.include\_aggregate | | `scan.scan_time_window` | object | Output field: scan.scan\_time\_window | | `scan.custom_targets` | string | Output field: scan.custom\_targets | | `scan.target_network_uuid` | object | Unique identifier | | `scan.auto_routed` | number | Output field: scan.auto\_routed | | `scan.remediation` | number | Output field: scan.remediation | | `scan.version` | number | Output field: scan.version | | `scan.triggers` | object | Output field: scan.triggers | | `scan.reporting_mode` | object | Output field: scan.reporting\_mode | | `scan.interval_type` | object | Type of the resource | ### Output Example `{"scan":{"tag_type":{},"container_id":"string","owner_uuid":"string","uuid":"12345678-1234-1234-1234-123456789abc","name":"Example Name","description":{},"policy_id":123,"scanner_id":{},"scanner_uuid":"string","emails":{},"sms":"string","enabled":true,"include_aggregate":true,"scan_time_window":{},"custom_targets":"string"}}` ## Download Assets Chunk Downloads a specified chunk of exported assets from Tenable Vulnerability Management using export\_uuid and chunk\_id. ### Endpoint - **URL:** `assets/export/{{export_uuid}}/chunks/{{chunk_id}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------------------- | -------- | ------------ | --------------------------------------------- | | `path_parameters.export_uuid` | string | Required | The UUID of the export request. | | `path_parameters.chunk_id` | number | Required | The ID of the asset chunk you want to export. | ### Input Example `{"path_parameters":{"export_uuid":"194","chunk_id":1}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:31:50 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Cache-Control":"no-store","Content-Encoding":"gzip","X-Request-Uuid":"10b5fcc99897f990a8704...` ## Download Exported Scan Retrieve a previously exported scan report from Tenable Vulnerability Management using the provided scan and file IDs. ### Endpoint - **URL:** `scans/{{scan_id}}/export/{{file_id}}/download` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------- | -------- | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.scan_id` | string | Required | The unique identifier for the exported scan you want to download. This identifier can be either the scans.schedule\_uuid or the scans.id attribute in the response message from the GET /scans endpoint. Tenable recommends that you use scans.schedule\_uuid. | | `path_parameters.file_id` | string | Required | The ID of the file to download (Included in response from /scans//export). | | `headers` | object | Required | HTTP headers for the request | | `headers.accept` | string | Required | HTTP headers for the request | ### Input Example `{"path_parameters":{"scan_id":"311","file_id":"SSE-3f06e801-0175-3e55-1dbd-0cefdfa31565bf36d8be25b21d01-csv"},"headers":{"accept":"application/octet-stream"}}` ### Output | **Parameter** | **Type** | **Description** | | --------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `response_text` | string | Output field: response\_text | ### Output Example `{"response_text":"string"}` ## Download report Downloads a specified PDF report from Tenable Vulnerability Management using the report's unique identifier. ### Endpoint - **URL:** `reports/export/{{report_uuid}}/download` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------------------- | -------- | ------------ | ----------------------------------- | | `headers` | object | Optional | HTTP headers for the request | | `headers.accept` | string | Required | The content type to accept. | | `path_parameters.report_uuid` | string | Required | The UUID of the report to download. | ### Input Example `{"headers":{"accept":"application/pdf"},"path_parameters":{"report_uuid":"4e461c25-600f-4e0a-8735-df85513d6c81"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `file` | object | Output field: file | | `file.file` | string | Output field: file.file | | `file.file_name` | string | Name of the resource | ### Output Example `{"file":{"file":"string","file_name":"Example Name"}}` ## Download Vulnerabilities Chunk Downloads a specified chunk of exported vulnerabilities from Tenable using export\_uuid and chunk\_id, returning a JSON file. ### Endpoint - **URL:** `vulns/export/{{export_uuid}}/chunks/{{chunk_id}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------------------- | -------- | ------------ | --------------------------------------------- | | `path_parameters.export_uuid` | string | Required | The UUID of the vulnerability export request. | | `path_parameters.chunk_id` | number | Required | The ID of the chunk you want to export. | | `headers` | object | Required | HTTP headers for the request | | `headers.accept` | string | Required | HTTP headers for the request | ### Input Example `{"path_parameters":{"export_uuid":"a7cee931-f7c4-408d-be1e-a6da3964a639","chunk_id":1},"headers":{"accept":"application/octet-stream"}}` ### Output | **Parameter** | **Type** | **Description** | | ----------------------------------------------- | -------- | -------------------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `asset` | object | Output field: asset | | `asset.fqdn` | string | Output field: asset.fqdn | | `asset.hostname` | string | Name of the resource | | `asset.uuid` | string | Unique identifier | | `asset.ipv4` | string | Output field: asset.ipv4 | | `asset.operating_system` | array | Output field: asset.operating\_system | | `asset.network_id` | string | Unique identifier | | `asset.tracked` | boolean | Output field: asset.tracked | | `output` | string | Output field: output | | `plugin` | object | Output field: plugin | | `plugin.cve` | array | Output field: plugin.cve | | `plugin.cvss_base_score` | number | Score value | | `plugin.cvss_temporal_score` | number | Score value | | `plugin.cvss_temporal_vector` | object | Output field: plugin.cvss\_temporal\_vector | | `plugin.cvss_temporal_vector.exploitability` | string | Output field: plugin.cvss\_temporal\_vector.exploitability | | `plugin.cvss_temporal_vector.remediation_level` | string | Output field: plugin.cvss\_temporal\_vector.remediation\_level | | `plugin.cvss_temporal_vector.report_confidence` | string | Unique identifier | | `plugin.cvss_temporal_vector.raw` | string | Output field: plugin.cvss\_temporal\_vector.raw | | `plugin.cvss_vector` | object | Output field: plugin.cvss\_vector | | `plugin.cvss_vector.access_complexity` | string | Output field: plugin.cvss\_vector.access\_complexity | | `plugin.cvss_vector.access_vector` | string | Output field: plugin.cvss\_vector.access\_vector | | `plugin.cvss_vector.authentication` | string | Output field: plugin.cvss\_vector.authentication | | `plugin.cvss_vector.confidentiality_impact` | string | Unique identifier | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:30:09 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"b98b82f6c11f66104d7354c69c68bbad","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":"...` ## Export Assets Information Exports asset data from Tenable Vulnerability Management based on criteria, with a specified chunk size for the output. ### Endpoint - **URL:** `assets/export` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | -------------------------------------- | -------- | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `chunk_size` | number | Optional | Specifies the number of assets per exported chunk. | | `include_open_ports` | boolean | Optional | Specifies whether or not to include open port findings from info-level plugins. If this parameter is omitted, Tenable Vulnerability Management uses a default value of false. | | `filters` | object | Optional | Specifies filters for exported assets. | | `filters.created_at` | number | Optional | Returns all assets created later than the date specified. The specified date must be in the Unix timestamp format. | | `filters.updated_at` | number | Optional | Returns all assets updated later than the date specified. The specified date must be in the Unix timestamp format. | | `filters.terminated_at` | number | Optional | Returns all assets terminated later than the date specified. The specified date must be in the Unix timestamp format. | | `filters.is_terminated` | boolean | Optional | When set to true, returns assets which have any value for the terminated\_at attribute. | | `filters.deleted_at` | number | Optional | Returns all assets deleted later than the date specified. The specified date must in the Unix timestamp format. | | `filters.is_deleted` | boolean | Optional | When set to true, returns assets which have any value for the deleted\_at attribute. | | `filters.is_licensed` | boolean | Optional | Specifies whether the asset is included in the asset count for the Tenable Vulnerability Management instance. If true, Tenable Vulnerability Management returns only licensed assets. If false, Tenable Vulnerability Management returns only unlicensed assets. | | `filters.first_scan_time` | number | Optional | Returns all assets with a first scan time later than the date specified. The specified date must be in the Unix timestamp format. | | `filters.last_authenticated_scan_time` | number | Optional | Returns all assets with a last credentialed scan time later than the date specified. The specified date must be in the Unix timestamp format. | | `filters.last_assessed` | number | Optional | Returns all assets with a last assessed time later than the date specified. | | `filters.servicenow_sysid` | boolean | Optional | If true, returns all assets that have a ServiceNow Sys ID, regardless of value. If false, returns all assets that do not have a ServiceNow Sys ID. | | `filters.sources` | array | Optional | Returns assets that have the specified asset source. Commonly used names include AWS, NESSUS\_AGENT, PVS, NESSUS\_SCAN and WAS. | | `filters.has_plugin_results` | boolean | Optional | Filter by whether or not the asset has plugin results associated with it. If true, Tenable Vulnerability Management returns all assets that have plugin results. | | `filters.network_id` | string | Optional | The ID of the network object associated with scanners that identified the assets you want to export. | | `filters.last_scan_id` | string | Optional | Returns all assets that were last scanned by the specified scan configuration UUID. | ### Input Example `{"json_body":{"chunk_size":10,"include_open_ports":true,"filters":{"created_at":0,"updated_at":0,"terminated_at":0,"is_terminated":false,"deleted_at":0,"is_deleted":false,"is_licensed":false,"first_scan_time":0,"last_authenticated_scan_time":0,"last_assessed":0,"servicenow_sysid":true,"sources":["NESSUS_AGENT","AWS"],"has_plugin_results":true,"network_id":"00000000-0000-0000-0000-000000000000","last_scan_id":"00000000-0000-0000-0000-000000000000"}}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `export_uuid` | string | Unique identifier | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:26:12 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"61c516579cc87225ca80e92cbcf97211","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":"...` ## Export Scan Exports a specified scan's results from Tenable Vulnerability Management, requiring the scan ID and output format. ### Endpoint - **URL:** `scans/{{scan_id}}/export` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------- | -------- | ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.scan_id` | string | Required | The identifier for the scan you want to export. This identifier can be either the scans.schedule\_uuid or the scans.id attribute in the response message from the GET /scans endpoint. Tenable recommends that you use scans.schedule\_uuid. | | `parameters.history_id` | number | Optional | The unique identifier of the historical data that you want Tenable.io to export. This identifier corresponds to the history.id attribute of the response message from the GET /scans//history endpoint. | | `parameters.history_uuid` | string | Optional | The UUID of the historical data that you want Tenable.io to return. This identifier corresponds to the history.scan\_uuid attribute of the response message from the GET /scans//history endpoint. | | `format` | string | Optional | The file format to use (Nessus, HTML, PDF, or CSV). | | `chapters` | string | Optional | The chapters to include in the export. This parameter accepts a semi-colon delimited string comprised of some combination of the following options. (vuln\_hosts\_summary, vuln\_by\_host, compliance\_exec, remediations, vuln\_by\_plugin, compliance). | | `asset_id` | string | Optional | The ID of the asset scanned. | ### Input Example `{"parameters":{"history_id":23,"history_uuid":"00000000-0000-0000-0000-000000000000"},"json_body":{"format":"csv","chapters":"compliance","asset_id":"00000000-0000-0000-0000-000000000000"},"path_parameters":{"scan_id":"311"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `file` | string | Output field: file | ### Output Example `{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 17:44:45 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Vary":"origin","Cache-Control":"no-cache","X-Request-Uuid":"3b4df445cf8b2d6f75e7f0c690bac8f1","X-XSS-Protection":"1; mode=block","X-Frame-Options":"DENY","Strict-Transport-Security":"max-age=63072000; includeSubDomain...` ## Export Vulnerabilities Exports a list of vulnerabilities from Tenable based on specified criteria, with the option to define the number of assets. ### Endpoint - **URL:** `vulns/export` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------------------ | -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `num_assets` | number | Optional | Specifies the number of assets used to chunk the vulnerabilities. | | `include_unlicensed` | boolean | Optional | Specifies whether or not to include unlicensed assets. The default is false when no parameter is specified. | | `filters` | object | Optional | Specifies filters for exported vulnerabilities. | | `filters.cidr_range` | string | Optional | Restricts search for vulnerabilities to assets assigned an IP address within the specified CIDR range. | | `filters.first_found` | number | Optional | Returns vulnerabilities that were first found between the specified date and now. The date must be specified in Unix 10-digit time format (seconds). | | `filters.indexed_at` | number | Optional | Returns vulnerabilities that were indexed into Tenable Vulnerability Management at the specified date. The date must be specified in Unix 10-digit time format (seconds). | | `filters.last_fixed` | number | Optional | Returns vulnerabilities that were fixed between the specified date and now. The date must be specified in Unix 10-digit time format (seconds). | | `filters.last_found` | number | Optional | Returns vulnerabilities that were last found between the specified date and now. The date must be specified in Unix 10-digit time format (seconds). | | `filters.since` | number | Optional | The start date for the range of data you want to export. The date must be specified in Unix 10-digit time format (seconds). | | `filters.network_id` | string | Optional | The ID of the network object associated with scanners that detected the vulnerabilities you want to export. | | `filters.plugin_family` | array | Optional | A list of plugin families for which you want to filter the vulnerabilities returned in the vulnerability export. For a list of supported plugin family values, use the GET /plugins/families endpoint. | | `filters.plugin_id` | array | Optional | A list of plugin IDs for which you want to filter the vulnerabilities returned in the vulnerability export. | | `filters.plugin_type` | string | Optional | The plugin type for which you want to filter the vulnerabilities returned in the vulnerability export. For example, remote, local, combined, etc. | | `filters.scan_uuid` | string | Optional | The UUID of the scan for which you want to filter vulnerabilities returned in the vulnerability export. | | `filters.severity` | array | Optional | The severity of the vulnerabilities to include in the export. Defaults to all severity levels. Supported array values are info, low, medium, high and critical. | | `filters.severity_modification_type` | array | Optional | Returns vulnerabilities with the specified severity modification type. This filter can be used to return vulnerabilities with a modified severity due to a recast or accept rule. Supported case-sensitive values are NONE, RECASTED and ACCEPTED. | | `filters.state` | array | Optional | The state of the vulnerabilities you want the export to include. Supported, case-insensitive values are OPEN(The vulnerability is currently present on a host), REOPENED(The vulnerability was previously marked as fixed on a host, but has returned) and FIXED(The vulnerability was present on a host, but is no longer detected). | | `filters.source` | array | Optional | Returns vulnerabilities identified by the specified source. A source is the entity that reported the vulnerability details. | | `filters.vpr_score` | object | Optional | Returns vulnerabilities with the specified Vulnerability Priority Rating (VPR) score or scores. | | `filters.vpr_score.eq` | array | Optional | Returns vulnerabilities with a VPR equal to the specified score or scores. This property cannot be combined with the following range operators lt, gt, lte, or gte. | | `filters.vpr_score.neq` | array | Optional | Returns vulnerabilities with a VPR not equal to the specified score or scores. This property can be combined with the eq property. | | `filters.vpr_score.gt` | number | Optional | Returns vulnerabilities with a VPR greater than the specified score. This property cannot be combined with the eq property. | | `filters.vpr_score.gte` | number | Optional | Returns vulnerabilities with a VPR greater than or equal to the specified score. This property cannot be combined with the eq property. | | `filters.vpr_score.lt` | number | Optional | Returns vulnerabilities with a VPR lesser than the specified score. This property cannot be combined with the eq property. | | `filters.vpr_score.lte` | number | Optional | Returns vulnerabilities with a VPR lesser than or equal to the specified score. This property cannot be combined with the eq property. | ### Input Example `{"json_body":{"num_assets":50,"include_unlicensed":true,"filters":{"cidr_range":"0.0.0.0/0","first_found":0,"indexed_at":0,"last_fixed":0,"last_found":0,"since":0,"network_id":"3fa85f64-5717-4562-b3fc-2c963f66afa6","plugin_family":["Backdoors"],"plugin_id":[0],"plugin_type":"remote","scan_uuid":"3fa85f64-5717-4562-b3fc-2c963f66afa6","severity":["low"],"severity_modification_type":["ACCEPTED"],"state":["OPEN"],"source":["AWS"],"vpr_score":{"eq":[0],"neq":[0],"gt":0,"gte":0,"lt":0,"lte":0}}}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `export_uuid` | string | Unique identifier | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 09:24:15 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","X-Request-Uuid":"9c71f6b38d372df7fb607052dc20705d","Strict-Transport-Security":...` ## Get Asset Details Retrieve detailed information for a specified asset using its unique identifier (UUID) in Tenable Vulnerability Management. ### Endpoint - **URL:** `assets/{{asset_uuid}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------------- | -------- | ------------ | ---------------------- | | `path_parameters.asset_uuid` | string | Required | The UUID of the asset. | ### Input Example `{"path_parameters":{"asset_uuid":"00fdbc7a-e3e9-42f9-b96b-ef91fbe86f94"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------ | -------- | --------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `id` | string | Unique identifier | | `has_agent` | boolean | Output field: has\_agent | | `created_at` | string | Output field: created\_at | | `updated_at` | string | Output field: updated\_at | | `terminated_at` | object | Output field: terminated\_at | | `deleted_at` | object | Output field: deleted\_at | | `first_seen` | string | Output field: first\_seen | | `last_seen` | string | Output field: last\_seen | | `last_scan_target` | string | Output field: last\_scan\_target | | `last_authenticated_scan_date` | object | Date value | | `last_licensed_scan_date` | string | Date value | | `last_scan_id` | string | Unique identifier | | `last_schedule_id` | string | Unique identifier | | `sources` | array | Output field: sources | | `sources.name` | string | Name of the resource | | `sources.first_seen` | string | Output field: sources.first\_seen | | `sources.last_seen` | string | Output field: sources.last\_seen | | `tags` | array | Output field: tags | | `acr_score` | object | Score value | | `acr_drivers` | array | Output field: acr\_drivers | | `acr_drivers.driver_name` | string | Name of the resource | | `acr_drivers.driver_value` | array | Value for the parameter | | `exposure_score` | object | Score value | ### Output Example `{"id":"12345678-1234-1234-1234-123456789abc","has_agent":true,"created_at":"string","updated_at":"string","terminated_at":{},"deleted_at":{},"first_seen":"string","last_seen":"string","last_scan_target":"string","last_authenticated_scan_date":{},"last_licensed_scan_date":"string","last_scan_id":"string","last_schedule_id":"string","sources":[{"name":"Example Name","first_seen":"string","last_seen":"string"}],"tags":["string"]}` ## Get Assets Export Status Retrieve the status of a Tenable asset export request using the specified export UUID. ### Endpoint - **URL:** `assets/export/{{export_uuid}}/status` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------------------- | -------- | ------------ | -------------------------------- | | `path_parameters.export_uuid` | string | Required | The UUID for the export request. | ### Input Example `{"path_parameters":{"export_uuid":"194"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------ | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `status` | string | Status value | | `chunks_available` | array | Output field: chunks\_available | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 07:27:55 GMT","Content-Type":"application/json;charset=utf-8","Content-Length":"43","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"22a7d1c4b1e0fbc505397c99b24660f7","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Accept-Ranges":"bytes","Strict-Trans...` ## Get Folders List Retrieve a comprehensive list of default and user-created folders from Tenable Vulnerability Management. ### Endpoint - **URL:** `folders` - **Method:** `GET` ### Output | **Parameter** | **Type** | **Description** | | ---------------------- | -------- | ---------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `folders` | array | Output field: folders | | `folders.id` | number | Unique identifier | | `folders.name` | string | Name of the resource | | `folders.type` | string | Type of the resource | | `folders.custom` | number | Output field: folders.custom | | `folders.unread_count` | number | Count value | | `folders.default_tag` | number | Output field: folders.default\_tag | ### Output Example `{"status_code":200,"response_headers":{"Date":"Tue, 21 Mar 2023 06:30:16 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"d1b9a54938eb03610c10e042027aaed8","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":...` ## Get Host Details From Scan Retrieve detailed information for a specific host from a scan in Tenable Vulnerability Management using the provided scan\_uuid and host\_id. ### Endpoint - **URL:** `scans/{{scan_uuid}}/hosts/{{host_id}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------------- | -------- | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.scan_uuid` | string | Required | The identifier for the scan. This identifier can be the either the schedule\_uuid or the numeric id attribute for the scan. Recommended to use schedule\_uuid. | | `path_parameters.host_id` | number | Required | The ID of the host to retrieve. | | `parameters.history_id` | number | Optional | The unique identifier of the historical data that you want Tenable.io to return. | | `parameters.history_uuid` | string | Optional | The UUID of the historical data that you want Tenable.io to return. | ### Input Example `{"parameters":{"history_id":23,"history_uuid":"f5fb06b6-3de3-4fb0-b21c-40c24423e77a"},"path_parameters":{"scan_uuid":"840fd26f-9272-4324-9a61-63cd57389b12","host_id":45}}` ### Output | **Parameter** | **Type** | **Description** | | -------------------------------- | -------- | --------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `info` | object | Output field: info | | `info.mac-address` | object | Output field: info.mac-address | | `info.host-fqdn` | string | Output field: info.host-fqdn | | `info.host-ip` | string | Output field: info.host-ip | | `info.operating-system` | array | Output field: info.operating-system | | `info.host_end` | string | Output field: info.host\_end | | `info.host_start` | string | Output field: info.host\_start | | `vulnerabilities` | array | Output field: vulnerabilities | | `vulnerabilities.count` | number | Count value | | `vulnerabilities.host_id` | number | Unique identifier | | `vulnerabilities.hostname` | string | Name of the resource | | `vulnerabilities.plugin_family` | string | Output field: vulnerabilities.plugin\_family | | `vulnerabilities.plugin_id` | number | Unique identifier | | `vulnerabilities.plugin_name` | string | Name of the resource | | `vulnerabilities.severity` | number | Output field: vulnerabilities.severity | | `vulnerabilities.severity_index` | number | Output field: vulnerabilities.severity\_index | | `vulnerabilities.vuln_index` | number | Output field: vulnerabilities.vuln\_index | | `compliance` | array | Output field: compliance | | `compliance.count` | number | Count value | | `compliance.host_id` | number | Unique identifier | | `compliance.hostname` | string | Name of the resource | | `compliance.plugin_family` | string | Output field: compliance.plugin\_family | | `compliance.plugin_id` | string | Unique identifier | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 29 Jan 2024 06:03:33 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Vary":"origin,accept-encoding","Cache-Control":"no-cache","Content-Encoding":"gzip","X-Request-Uuid":"ed50d37af715f50215ad1d9d56be523d","X-XSS-Protection":"1; mode=block","X-Frame-Options":"DENY","Strict-Transport-Sec...` ## Get Plugin Details Retrieve detailed information for a specified plugin in Tenable Vulnerability Management using the provided plugin ID. ### Endpoint - **URL:** `plugins/plugin/{{id}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | -------------------- | -------- | ------------ | --------------------- | | `path_parameters.id` | number | Required | The ID of the plugin. | ### Input Example `{"path_parameters":{"id":34256}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------- | -------- | ------------------------ | | `attributes` | array | Output field: attributes | | `attributes.attribute_value` | string | Value for the parameter | | `attributes.attribute_name` | string | Name of the resource | | `family_name` | string | Name of the resource | | `name` | string | Name of the resource | | `id` | number | Unique identifier | ### Output Example `{"attributes":[{"attribute_value":"aix_IY19744.nasl","attribute_name":"fname"},{"attribute_value":"AIX 5.1 : IY19744","attribute_name":"plugin_name"},{"attribute_value":"$Revision: 1.5 $","attribute_name":"script_version"}],"family_name":"AIX Local Security Checks","name":"AIX 5.1 : IY19744","id":22372}` ## Get report status Retrieve the current status of a report export request in Tenable Vulnerability Management using the report's UUID. ### Endpoint - **URL:** `reports/export/{{report_uuid}}/status` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------------------- | -------- | ------------ | ----------------------------------------------- | | `path_parameters.report_uuid` | string | Required | The UUID of the report to check the status for. | ### Input Example `{"path_parameters":{"report_uuid":"4e461c25-600f-4e0a-8735-df85513d6c81"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `status` | string | Status value | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 03 Feb 2025 06:58:36 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"22","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"195b0e5dbe98e89ce5e1b909a9e999a5","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X...` ## Get Scan Details Retrieve detailed results for a specific scan in Tenable Vulnerability Management using the provided scan\_id. ### Endpoint - **URL:** `scans/{{scan_id}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.scan_id` | string | Required | The unique identifier for the scan you want to retrieve. This identifier can be either the 'scans.schedule\_uuid' or the 'scans.id' attribute in the response message from the 'GET /scans' endpoint. Tenable recommends that you use 'scans.schedule\_uuid'. | | `parameters.history_id` | string | Optional | The unique identifier of the historical data that you want Tenable.io to return. This identifier corresponds to the 'history.id' attribute of the response message from the 'GET /scans//history' endpoint. | ### Input Example `{"parameters":{"history_id":"6c568d0d-aaf9-17a6-b780-fcce7082351ca90b6a6b535a0c4c"},"path_parameters":{"scan_id":"0b9317b7-f633-4ca7-b695-8f219bb13f2a"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------ | -------- | ------------------------------------ | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `info` | object | Output field: info | | `info.owner` | string | Output field: info.owner | | `info.name` | string | Name of the resource | | `info.no_target` | boolean | Output field: info.no\_target | | `info.folder_id` | number | Unique identifier | | `info.control` | boolean | Output field: info.control | | `info.user_permissions` | number | Output field: info.user\_permissions | | `info.schedule_uuid` | string | Unique identifier | | `info.edit_allowed` | boolean | Output field: info.edit\_allowed | | `info.scanner_name` | object | Name of the resource | | `info.policy` | object | Output field: info.policy | | `info.shared` | boolean | Output field: info.shared | | `info.object_id` | number | Unique identifier | | `info.tag_targets` | array | Output field: info.tag\_targets | | `info.acls` | array | Output field: info.acls | | `info.acls.permissions` | number | Output field: info.acls.permissions | | `info.acls.owner` | number | Output field: info.acls.owner | | `info.acls.display_name` | string | Name of the resource | | `info.acls.name` | string | Name of the resource | | `info.acls.id` | number | Unique identifier | | `info.acls.type` | string | Type of the resource | | `info.hostcount` | number | Count value | | `info.uuid` | string | Unique identifier | ### Output Example `{"info":{"owner":"string","name":"Example Name","no_target":true,"folder_id":123,"control":true,"user_permissions":123,"schedule_uuid":"string","edit_allowed":true,"scanner_name":{},"policy":{},"shared":true,"object_id":123,"tag_targets":["string"],"acls":[{}],"hostcount":123},"history":[{"history_id":123,"owner_id":123,"creation_date":123,"last_modification_date":123,"uuid":"12345678-1234-1234-1234-123456789abc","type":{},"status":"active","scheduler":123,"alt_targets_used":true,"is_archived":t...` ## Get Scan Status Retrieve the latest status of a specific scan from Tenable Vulnerability Management using the unique scan\_id. ### Endpoint - **URL:** `scans/{{scan_id}}/latest-status` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------- | -------- | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.scan_id` | string | Required | The unique identifier for the scan. This identifier can be either the scans.schedule\_uuid or the scans.id attribute in the response message from the GET /scans endpoint. | ### Input Example `{"path_parameters":{"scan_id":"123"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `status` | string | Status value | | `progress` | number | Output field: progress | ### Output Example `{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 10:49:11 GMT","Content-Type":"application/json; charset=utf-8","Content-Length":"34","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"7ad545d3b8b9bf10d0a5384729448460","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-cache","Accept-Ranges":"bytes","Strict-Tran...` ## Get Scans List Retrieve a list of scans from Tenable Vulnerability Management with 'CAN VIEW' permissions. ### Endpoint - **URL:** `scans` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------------------------- | -------- | ------------ | ---------------------------------------- | | `parameters.folder_id` | number | Optional | Parameters for the Get Scans List action | | `parameters.last_modification_date` | number | Optional | Parameters for the Get Scans List action | ### Input Example `{"parameters":{"folder_id":311,"last_modification_date":1633990491}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------ | -------- | ------------------------------------- | | `scans` | array | Output field: scans | | `scans.control` | boolean | Output field: scans.control | | `scans.creation_date` | number | Date value | | `scans.enabled` | boolean | Output field: scans.enabled | | `scans.id` | number | Unique identifier | | `scans.last_modification_date` | number | Date value | | `scans.legacy` | boolean | Output field: scans.legacy | | `scans.name` | string | Name of the resource | | `scans.owner` | string | Output field: scans.owner | | `scans.policy_id` | number | Unique identifier | | `scans.read` | boolean | Output field: scans.read | | `scans.schedule_uuid` | string | Unique identifier | | `scans.shared` | boolean | Output field: scans.shared | | `scans.status` | string | Status value | | `scans.template_uuid` | string | Unique identifier | | `scans.has_triggers` | boolean | Output field: scans.has\_triggers | | `scans.type` | string | Type of the resource | | `scans.permissions` | number | Output field: scans.permissions | | `scans.user_permissions` | number | Output field: scans.user\_permissions | | `scans.uuid` | string | Unique identifier | | `scans.wizard_uuid` | string | Unique identifier | | `scans.progress` | number | Output field: scans.progress | | `scans.total_targets` | number | Output field: scans.total\_targets | | `folders` | array | Output field: folders | | `folders.id` | number | Unique identifier | ### Output Example `{"scans":[],"folders":[],"timestamp":123}` ## Get Timezones Obtain a list of timezones supported by Tenable Vulnerability Management for scan scheduling. ### Endpoint - **URL:** `scans/timezones` - **Method:** `GET` ### Output | **Parameter** | **Type** | **Description** | | ------------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `timezones` | array | Output field: timezones | | `timezones.name` | string | Name of the resource | | `timezones.value` | string | Value for the parameter | | `timezones.current` | boolean | Output field: timezones.current | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 11:38:47 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Cache-Control":"no-store","Pragma":"no-cache","Expires":"0","X-Frame-Options":"DENY","X-Content-Type-Options":"nosniff","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Content-Encoding":"gzip","X-R...` ## Get Vulnerabilities Export Status Retrieve the status of a vulnerability export in Tenable Vulnerability Management using the specified export\_uuid. ### Endpoint - **URL:** `vulns/export/{{export_uuid}}/status` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------------------- | -------- | ------------ | ---------------------------------------------- | | `path_parameters.export_uuid` | string | Required | The UUID for the vulnerability export request. | ### Input Example `{"path_parameters":{"export_uuid":"a7cee931-f7c4-408d-be1e-a6da3964a639"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------ | -------- | ------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `uuid` | string | Unique identifier | | `status` | string | Status value | | `chunks_available` | array | Output field: chunks\_available | | `chunks_failed` | array | Output field: chunks\_failed | | `chunks_cancelled` | array | Output field: chunks\_cancelled | | `total_chunks` | number | Output field: total\_chunks | | `chunks_available_count` | number | Count value | | `empty_chunks_count` | number | Count value | | `finished_chunks` | number | Output field: finished\_chunks | | `filters` | object | Output field: filters | | `filters.state` | array | Output field: filters.state | | `filters.tags` | object | Output field: filters.tags | | `filters.since` | number | Output field: filters.since | | `filters.first_found` | number | Output field: filters.first\_found | | `filters.last_found` | number | Output field: filters.last\_found | | `filters.last_fixed` | number | Output field: filters.last\_fixed | | `filters.first_seen` | number | Output field: filters.first\_seen | | `filters.last_seen` | number | Output field: filters.last\_seen | | `filters.indexed_at` | number | Output field: filters.indexed\_at | | `filters.indexed_at_end_value` | number | Value for the parameter | | `num_assets_per_chunk` | number | Output field: num\_assets\_per\_chunk | | `created` | number | Output field: created | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 09:28:28 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"ab9bcf704507acec0e4e7fba7a868b65","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin","Cache-Control":"no-store","Strict-Transport-Security":...` ## Launch Scan Initiates a vulnerability scan in Tenable Vulnerability Management using the provided scan ID. ### Endpoint - **URL:** `scans/{{scan_id}}/launch` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------- | -------- | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.scan_id` | string | Required | The unique identifier of the scan to launch. | | `alt_targets` | array | Optional | Targets which are scanned by Tenable.io instead of the default. | | `rollover` | boolean | Optional | Indicates whether or not to launch a rollover scan instead of full scan. A rollover scan only runs against the targets that Tenable.io did not scan due to a previous scan timeout. | ### Input Example `{"json_body":{"alt_targets":["test","target"],"rollover":true},"path_parameters":{"scan_id":"840fd26f-9272-4324-9a61-63cd57389b12"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `scan_uuid` | string | Unique identifier | ### Output Example `{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 18:00:53 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Cache-Control":"no-cache","Pragma":"","Expires":"0","X-Frame-Options":"DENY","X-Content-Type-Options":"nosniff","X-Xss-Protection":"1; mode=block","Vary":"origin","X-Request-Uuid":"f17eb317082da50a7cfdb53ca907ef0b","S...` ## List asset vulnerabilities Retrieves a list of vulnerabilities for a specified asset in Tenable Vulnerability Management using the asset\_id. ### Endpoint - **URL:** `/workbenches/assets/{{asset_id}}/vulnerabilities` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------------- | -------- | ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.asset_id` | string | Required | The UUID of the asset. | | `parameters.date_range` | number | Optional | The number of days of data prior to and including today that should be returned. See README for details. | | `parameters.filter.0.filter` | string | Optional | The name of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.quality` | string | Optional | The operator of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.value` | string | Optional | The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details. | | `parameters.filter.search_type` | string | Optional | For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details. | ### Input Example `{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND"},"path_parameters":{"asset_id":"4e461c25-600f-4e0a-8735-df85513d6c81"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------ | -------- | -------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `vulnerabilities` | array | Output field: vulnerabilities | | `vulnerabilities.count` | number | Count value | | `vulnerabilities.plugin_family` | string | Output field: vulnerabilities.plugin\_family | | `vulnerabilities.plugin_id` | number | Unique identifier | | `vulnerabilities.plugin_name` | string | Name of the resource | | `vulnerabilities.vulnerability_state` | string | Output field: vulnerabilities.vulnerability\_state | | `vulnerabilities.vpr_score` | number | Score value | | `vulnerabilities.accepted_count` | number | Count value | | `vulnerabilities.recasted_count` | number | Count value | | `vulnerabilities.counts_by_severity` | array | Output field: vulnerabilities.counts\_by\_severity | | `vulnerabilities.counts_by_severity.count` | number | Count value | | `vulnerabilities.counts_by_severity.value` | number | Value for the parameter | | `vulnerabilities.severity` | number | Output field: vulnerabilities.severity | | `total_vulnerability_count` | number | Count value | | `total_asset_count` | number | Count value | ### Output Example `{"status_code":200,"response_headers":{"Date":"Thu, 30 Jan 2025 07:41:03 GMT","Content-Type":"application/octet-stream","Content-Length":"0","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"c75dcec9e874bb6b4064535d2aee9a54","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X-Content...` ## List Assets Retrieve up to 5,000 assets from Tenable Vulnerability Management for analysis or tracking. ### Endpoint - **URL:** `assets` - **Method:** `GET` ### Output | **Parameter** | **Type** | **Description** | | --------------------------------- | -------- | ---------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `assets` | array | Output field: assets | | `assets.id` | string | Unique identifier | | `assets.has_agent` | boolean | Output field: assets.has\_agent | | `assets.last_seen` | string | Output field: assets.last\_seen | | `assets.last_scan_target` | string | Output field: assets.last\_scan\_target | | `assets.sources` | array | Output field: assets.sources | | `assets.sources.name` | string | Name of the resource | | `assets.sources.first_seen` | string | Output field: assets.sources.first\_seen | | `assets.sources.last_seen` | string | Output field: assets.sources.last\_seen | | `assets.acr_score` | object | Score value | | `assets.acr_drivers` | array | Output field: assets.acr\_drivers | | `assets.acr_drivers.driver_name` | string | Name of the resource | | `assets.acr_drivers.driver_value` | array | Value for the parameter | | `assets.exposure_score` | object | Score value | | `assets.scan_frequency` | array | Output field: assets.scan\_frequency | | `assets.scan_frequency.interval` | number | Output field: assets.scan\_frequency.interval | | `assets.scan_frequency.frequency` | number | Output field: assets.scan\_frequency.frequency | | `assets.scan_frequency.licensed` | boolean | Output field: assets.scan\_frequency.licensed | | `assets.ipv4` | array | Output field: assets.ipv4 | | `assets.ipv6` | string | Output field: assets.ipv6 | | `assets.fqdn` | string | Output field: assets.fqdn | | `assets.mac_address` | array | Output field: assets.mac\_address | | `assets.netbios_name` | string | Name of the resource | ### Output Example `{"status_code":200,"response_headers":{"Date":"Tue, 23 Jan 2024 11:27:11 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"15cfff713c2b2ef855947c064dfbf063","Cache-Control":"no-store","Vary":"accept-encoding,origin","Content-Encoding":"gzip","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1...` ## List assets with vulnerabilities Retrieve a list of assets along with their associated vulnerabilities from Tenable Vulnerability Management. ### Endpoint - **URL:** `workbenches/assets/vulnerabilities` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------------- | -------- | ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.date_range` | number | Optional | The number of days of data prior to and including today that should be returned. See README for details. | | `parameters.filter.0.filter` | string | Optional | The name of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.quality` | string | Optional | The operator of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.value` | string | Optional | The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details. | | `parameters.filter.search_type` | string | Optional | For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details. | ### Input Example `{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------- | -------- | ------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `assets` | array | Output field: assets | | `assets.id` | string | Unique identifier | | `assets.severities` | array | Output field: assets.severities | | `assets.severities.count` | number | Count value | | `assets.severities.level` | number | Output field: assets.severities.level | | `assets.severities.name` | string | Name of the resource | | `assets.total` | number | Output field: assets.total | | `assets.fqdn` | array | Output field: assets.fqdn | | `assets.ipv4` | array | Output field: assets.ipv4 | | `assets.ipv6` | array | Output field: assets.ipv6 | | `assets.last_seen` | string | Output field: assets.last\_seen | | `assets.netbios_name` | array | Name of the resource | | `assets.agent_name` | array | Name of the resource | | `total_asset_count` | number | Count value | ### Output Example `{"assets":[{"id":"12345678-1234-1234-1234-123456789abc","severities":[],"total":123,"fqdn":[],"ipv4":[],"ipv6":[],"last_seen":"string","netbios_name":[],"agent_name":[]}],"total_asset_count":123}` ## List Credential Types Retrieve all supported credential types for managed credentials in Tenable.io. ### Endpoint - **URL:** `credentials/types` - **Method:** `GET` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------ | -------- | ----------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `credentials` | array | Output field: credentials | | `credentials.id` | string | Unique identifier | | `credentials.category` | string | Output field: credentials.category | | `credentials.default_expand` | boolean | Output field: credentials.default\_expand | | `credentials.types` | array | Type of the resource | | `credentials.types.id` | string | Unique identifier | | `credentials.types.name` | string | Name of the resource | | `credentials.types.max` | number | Type of the resource | | `credentials.types.configuration` | array | Type of the resource | | `credentials.types.configuration.type` | string | Type of the resource | | `credentials.types.configuration.name` | string | Name of the resource | | `credentials.types.configuration.hint` | string | Type of the resource | | `credentials.types.configuration.id` | string | Unique identifier | | `credentials.types.configuration.fileType` | string | Type of the resource | | `credentials.types.configuration.required` | boolean | Type of the resource | | `credentials.types.configuration.default` | string | Type of the resource | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 29 Jan 2024 05:22:37 GMT","Content-Type":"application/json;charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Content-Type-Options":"nosniff","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Cache-Control":"no-store","Content-Encoding":"gzip","X-Request-Uuid":"818c0a982173a7ae88ac4...` ## List Plugin Families Retrieves a comprehensive list of plugin families from Tenable Vulnerability Management. ### Endpoint - **URL:** `plugins/families` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ----------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | | `parameters.all` | boolean | Optional | Specifies whether to return all plugin families. If true, the plugin families hidden in Tenable.io UI, for example, Port Scanners, are included in the list. | ### Input Example `{"parameters":{"all":true}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------- | -------- | ---------------------- | | `families` | array | Output field: families | | `families.count` | number | Count value | | `families.name` | string | Name of the resource | | `families.id` | number | Unique identifier | ### Output Example `{"families":[{"count":11342,"name":"AIX Local Security Checks","id":1},{"count":1164,"name":"Amazon Linux Local Security Checks","id":35},{"count":114,"name":"Backdoors","id":17}]}` ## List Plugins Retrieve a paginated list of detailed plugin information from Tenable Vulnerability Management. ### Endpoint - **URL:** `plugins/plugin` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------- | -------- | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.last_updated` | string | Optional | The last updated date to filter on in the YYYY-MM-DD format. | | `parameters.size` | number | Optional | The number of records to include in the result set. Default is 1,000. The maximum size is 10,000. | | `parameters.page` | number | Optional | The index of the page to return relative to the specified page size. For example, to return records 10-19 with page size 10, you must specify page 2. If you omit this parameter, Tenable.io applies the default value of 1. | ### Input Example `{"parameters":{"last_updated":"2023-04-13","size":1000,"page":10}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------------------------- | -------- | --------------- | | `data` | object | Response data | | `data.plugin_details` | array | Response data | | `data.plugin_details.id` | number | Response data | | `data.plugin_details.name` | string | Response data | | `data.plugin_details.attributes` | object | Response data | | `data.plugin_details.attributes.plugin_modification_date` | string | Response data | | `data.plugin_details.attributes.plugin_version` | string | Response data | | `data.plugin_details.attributes.exploited_by_malware` | boolean | Response data | | `data.plugin_details.attributes.description` | string | Response data | | `data.plugin_details.attributes.unsupported_by_vendor` | boolean | Response data | | `data.plugin_details.attributes.cvss_temporal_score` | number | Response data | | `data.plugin_details.attributes.patch_publication_date` | string | Response data | | `data.plugin_details.attributes.see_also` | array | Response data | | `data.plugin_details.attributes.default_account` | boolean | Response data | | `data.plugin_details.attributes.exploit_available` | boolean | Response data | | `data.plugin_details.attributes.exploit_framework_canvas` | boolean | Response data | | `data.plugin_details.attributes.cvss_base_score` | number | Response data | | `data.plugin_details.attributes.solution` | string | Response data | | `data.plugin_details.attributes.exploit_framework_exploithub` | boolean | Response data | | `data.plugin_details.attributes.cpe` | array | Response data | | `data.plugin_details.attributes.plugin_publication_date` | string | Response data | | `data.plugin_details.attributes.exploit_framework_core` | boolean | Response data | | `data.plugin_details.attributes.in_the_news` | boolean | Response data | | `data.plugin_details.attributes.has_patch` | boolean | Response data | | `data.plugin_details.attributes.xref` | array | Response data | ### Output Example `{"data":{"plugin_details":[{},{},{}]},"size":1000,"params":{"page":3,"size":1000,"last_updated":"2018-01-01"},"total_count":75621}` ## List Plugins in Family Retrieve a list of plugins within a specified family from Tenable Vulnerability Management using the family ID. ### Endpoint - **URL:** `plugins/families/{{id}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | -------------------- | -------- | ------------ | ------------------------------- | | `path_parameters.id` | number | Required | The ID of the family to lookup. | ### Input Example `{"path_parameters":{"id":34256}}` ### Output | **Parameter** | **Type** | **Description** | | -------------- | -------- | --------------------- | | `plugins` | array | Output field: plugins | | `plugins.id` | number | Unique identifier | | `plugins.name` | string | Name of the resource | | `name` | string | Name of the resource | | `id` | number | Unique identifier | ### Output Example `{"plugins":[{"id":22372,"name":"AIX 5.1 : IY19744"},{"id":22373,"name":"AIX 5.1 : IY20486"},{"id":22374,"name":"AIX 5.1 : IY21309"}],"name":"AIX Local Security Checks","id":1}` ## List Policies Retrieves a comprehensive list of scan policies available in Tenable Vulnerability Management. ### Endpoint - **URL:** `policies` - **Method:** `GET` ### Output | **Parameter** | **Type** | **Description** | | --------------------------------- | -------- | ---------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `policies` | array | Output field: policies | | `policies.no_target` | string | Output field: policies.no\_target | | `policies.template_uuid` | string | Unique identifier | | `policies.description` | object | Output field: policies.description | | `policies.name` | string | Name of the resource | | `policies.owner` | string | Output field: policies.owner | | `policies.visibility` | string | Output field: policies.visibility | | `policies.shared` | number | Output field: policies.shared | | `policies.user_permissions` | number | Output field: policies.user\_permissions | | `policies.last_modification_date` | number | Date value | | `policies.creation_date` | number | Date value | | `policies.owner_id` | number | Unique identifier | | `policies.id` | number | Unique identifier | ### Output Example `{"policies":[{"no_target":"string","template_uuid":"string","description":{},"name":"Example Name","owner":"string","visibility":"string","shared":123,"user_permissions":123,"last_modification_date":123,"creation_date":123,"owner_id":123,"id":123}]}` ## List Scanners Retrieve all available scanners from Tenable Vulnerability Management to track and analyze assets. ### Endpoint - **URL:** `scanners` - **Method:** `GET` ### Output | **Parameter** | **Type** | **Description** | | ----------------------------------- | -------- | ------------------------------------------------ | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `scanners` | array | Output field: scanners | | `scanners.creation_date` | number | Date value | | `scanners.group` | boolean | Output field: scanners.group | | `scanners.id` | number | Unique identifier | | `scanners.key` | string | Output field: scanners.key | | `scanners.last_connect` | number | Output field: scanners.last\_connect | | `scanners.last_modification_date` | number | Date value | | `scanners.license` | object | Output field: scanners.license | | `scanners.license.record_id` | string | Unique identifier | | `scanners.license.type` | string | Type of the resource | | `scanners.license.activation_code` | string | Output field: scanners.license.activation\_code | | `scanners.license.agents` | number | Output field: scanners.license.agents | | `scanners.license.ips` | number | Output field: scanners.license.ips | | `scanners.license.scanners` | number | Output field: scanners.license.scanners | | `scanners.license.users` | number | Output field: scanners.license.users | | `scanners.license.enterprise_pause` | boolean | Output field: scanners.license.enterprise\_pause | | `scanners.license.expiration_date` | number | Date value | | `scanners.license.evaluation` | boolean | Output field: scanners.license.evaluation | | `scanners.license.apps` | object | Output field: scanners.license.apps | | `scanners.license.apps.pci` | object | Output field: scanners.license.apps.pci | | `scanners.license.apps.pci.mode` | string | Output field: scanners.license.apps.pci.mode | | `scanners.license.apps.vm` | object | Output field: scanners.license.apps.vm | | `scanners.license.apps.vm.assets` | number | Output field: scanners.license.apps.vm.assets | ### Output Example `{"scanners":[{"creation_date":123,"group":true,"id":123,"key":"string","last_connect":123,"last_modification_date":123,"license":{},"linked":123,"name":"Example Name","network_name":"Example Name","num_scans":123,"owner":"string","owner_id":123,"owner_name":"Example Name","owner_uuid":"string"}]}` ## List Tag Values Retrieve a list of tag values from Tenable Vulnerability Management for categorization and analysis. ### Endpoint - **URL:** `tags/values` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------- | -------- | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.f` | string | Optional | A filter condition in the field\:operator\:value format, for example, f=value\:match\:rhel. Filters should match field\:op\:value format. | | `parameters.ft` | string | Optional | If multiple f parameters are present, specifies whether Tenable Vulnerability Management applies AND or OR to conditions. Supported values are and and or. If you omit this parameter when using multiple f parameters, Tenable Vulnerability Management applies AND by default. | | `parameters.wf` | string | Optional | A comma-separated list of fields to include in the wildcard search. Provides the same functionality as a match condition in the f in parameter. For example, f=value\:match\:Chi returns the same results as wf=value\&w=Chi. Wildcard fields include category\_name, value, description. Use the w parameter to specify the search value. | | `parameters.w` | string | Optional | A single search value for the wildcard fields specified in the wf parameter. | | `parameters.limit` | number | Optional | The number of records to retrieve. If this parameter is omitted. | | `parameters.offset` | number | Optional | The starting record to retrieve. If this parameter is omitted. | | `parameters.sort` | string | Optional | The field you want to use to sort the results by along with the sort order. The field is specified first, followed by a colon, and the order is specified second (asc or desc). For example, value\:desc would sort results by the value field in descending order. If you specify multiple fields, the fields must be separated by commas. For example, value\:desc,updated\_at\:asc would first sort results by the value field in descending order and then by the updated\_at field in ascending order. | ### Input Example `{"parameters":{"f":"value:match:test","ft":"tag","wf":"f=category_name:match:Chi","w":"category_name","limit":5000,"offset":0,"sort":"category_name:desc"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------------ | -------- | ----------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `values` | array | Value for the parameter | | `values.uuid` | string | Unique identifier | | `values.created_at` | string | Value for the parameter | | `values.created_by` | string | Value for the parameter | | `values.updated_at` | string | Value for the parameter | | `values.updated_by` | string | Value for the parameter | | `values.category_uuid` | string | Unique identifier | | `values.value` | string | Value for the parameter | | `values.description` | string | Value for the parameter | | `values.type` | string | Type of the resource | | `values.category_name` | string | Name of the resource | | `values.category_description` | string | Value for the parameter | | `values.access_control` | object | Value for the parameter | | `values.access_control.version` | number | Value for the parameter | | `values.access_control.current_user_permissions` | array | Value for the parameter | | `pagination` | object | Output field: pagination | | `pagination.offset` | number | Output field: pagination.offset | | `pagination.limit` | number | Output field: pagination.limit | | `pagination.total` | number | Output field: pagination.total | | `pagination.sort` | array | Output field: pagination.sort | | `pagination.sort.name` | string | Name of the resource | | `pagination.sort.order` | string | Output field: pagination.sort.order | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 03 Feb 2025 07:00:39 GMT","Content-Type":"application/pdf","Content-Length":"44830","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Content-Disposition":"attachment; filename*=UTF-8''My+Summary+Report.pdf","Vary":"origin","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"...` ## List Templates Retrieve Tenable-provided scan templates by specifying the template type. Requires 'type' as a path parameter. ### Endpoint - **URL:** `editor/{{type}}/templates` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------- | -------- | ------------ | ----------------------------------------------------------------- | | `path_parameters.type` | string | Required | The type of templates to retrieve (scan, policy, or remediation). | ### Input Example `{"path_parameters":{"type":"scan"}}` ### Output | **Parameter** | **Type** | **Description** | | ----------------------------- | -------- | ------------------------------------------ | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `templates` | array | Output field: templates | | `templates.unsupported` | boolean | Output field: templates.unsupported | | `templates.cloud_only` | boolean | Output field: templates.cloud\_only | | `templates.desc` | string | Output field: templates.desc | | `templates.order` | number | Output field: templates.order | | `templates.subscription_only` | boolean | Output field: templates.subscription\_only | | `templates.is_was` | object | Output field: templates.is\_was | | `templates.title` | string | Output field: templates.title | | `templates.is_agent` | object | Output field: templates.is\_agent | | `templates.uuid` | string | Unique identifier | | `templates.icon` | string | Output field: templates.icon | | `templates.manager_only` | boolean | Output field: templates.manager\_only | | `templates.name` | string | Name of the resource | ### Output Example `{"status_code":200,"response_headers":{"Date":"Wed, 24 Jan 2024 11:23:56 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Cache-Control":"no-store","Pragma":"no-cache","Expires":"0","X-Frame-Options":"DENY","X-Content-Type-Options":"nosniff","X-Xss-Protection":"1; mode=block","Vary":"origin,accept-encoding","Content-Encoding":"gzip","X-R...` ## List vulnerabilities Retrieve a comprehensive list of vulnerabilities recorded by Tenable Vulnerability Management. ### Endpoint - **URL:** `workbenches/vulnerabilities` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------------- | -------- | ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.date_range` | number | Optional | The number of days of data prior to and including today that should be returned. See README for details. | | `parameters.filter.0.filter` | string | Optional | The name of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.quality` | string | Optional | The operator of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.value` | string | Optional | The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details. | | `parameters.filter.search_type` | string | Optional | For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details. | ### Input Example `{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------------------------------------ | -------- | -------------------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `vulnerabilities` | array | Output field: vulnerabilities | | `vulnerabilities.count` | number | Count value | | `vulnerabilities.plugin_family` | string | Output field: vulnerabilities.plugin\_family | | `vulnerabilities.plugin_id` | number | Unique identifier | | `vulnerabilities.plugin_name` | string | Name of the resource | | `vulnerabilities.vulnerability_state` | string | Output field: vulnerabilities.vulnerability\_state | | `vulnerabilities.severity` | number | Output field: vulnerabilities.severity | | `vulnerabilities.accepted_count` | number | Count value | | `vulnerabilities.recasted_count` | number | Count value | | `vulnerabilities.counts_by_severity` | array | Output field: vulnerabilities.counts\_by\_severity | | `vulnerabilities.counts_by_severity.count` | number | Count value | | `vulnerabilities.counts_by_severity.value` | number | Value for the parameter | | `vulnerabilities.cvss_base_score` | number | Score value | | `vulnerabilities.cvss3_base_score` | number | Score value | | `vulnerabilities.vpr_score` | number | Score value | | `total_vulnerability_count` | number | Count value | | `total_asset_count` | number | Count value | ### Output Example `{"status_code":200,"response_headers":{"Date":"Thu, 30 Jan 2025 07:38:11 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","Vary":"origin,accept-encoding","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options":"DENY","X-Xss-Protection":"1; mode=block","X-Download-Options":"noopen","X-Content-Type-Options":"nosn...` ## List workbench assets Retrieve a comprehensive list of assets from Tenable Vulnerability Management for analysis and reporting. ### Endpoint - **URL:** `workbenches/assets` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------------- | -------- | ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `parameters.date_range` | number | Optional | The number of days of data prior to and including today that should be returned. See README for details. | | `parameters.filter.0.filter` | string | Optional | The name of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.quality` | string | Optional | The operator of the filter to apply to the exported scan report. See README for details. | | `parameters.filter.0.value` | string | Optional | The value of the filter to apply to the exported scan report. The value is case sensitive when used with the match (contains) or nmatch (does not contain) operators. See README for details. | | `parameters.filter.search_type` | string | Optional | For multiple filters, specifies whether to use the AND or the OR logical operator. See README for details. | | `parameters.all_fields` | string | Optional | A value specifying whether you want the returned data to include all fields (full) or only the default fields (default). See README for details. | ### Input Example `{"parameters":{"date_range":7,"filter.0.filter":"plugin.name","filter.0.quality":"match","filter.0.value":"RHEL","filter.search_type":"AND","all_fields":"full"}}` ### Output | **Parameter** | **Type** | **Description** | | --------------------------------- | -------- | ---------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `assets` | array | Output field: assets | | `assets.id` | string | Unique identifier | | `assets.has_agent` | boolean | Output field: assets.has\_agent | | `assets.last_seen` | string | Output field: assets.last\_seen | | `assets.last_scan_target` | string | Output field: assets.last\_scan\_target | | `assets.sources` | array | Output field: assets.sources | | `assets.sources.name` | string | Name of the resource | | `assets.sources.first_seen` | string | Output field: assets.sources.first\_seen | | `assets.sources.last_seen` | string | Output field: assets.sources.last\_seen | | `assets.ipv4` | array | Output field: assets.ipv4 | | `assets.ipv6` | string | Output field: assets.ipv6 | | `assets.fqdn` | array | Output field: assets.fqdn | | `assets.netbios_name` | string | Name of the resource | | `assets.operating_system` | array | Output field: assets.operating\_system | | `assets.agent_name` | string | Name of the resource | | `assets.aws_ec2_name` | string | Name of the resource | | `assets.mac_address` | string | Output field: assets.mac\_address | | `assets.bigfix_asset_id` | string | Unique identifier | | `assets.acr_score` | number | Score value | | `assets.acr_drivers` | array | Output field: assets.acr\_drivers | | `assets.acr_drivers.driver_name` | string | Name of the resource | | `assets.acr_drivers.driver_value` | array | Value for the parameter | | `assets.exposure_score` | number | Score value | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 10 Feb 2025 06:14:18 GMT","Content-Type":"application/json; charset=utf-8","Transfer-Encoding":"chunked","Connection":"keep-alive","Set-Cookie":"nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-clou...","X-Request-Uuid":"21421b6e91003b5601030f73ac735572","Cache-Control":"no-store","Vary":"accept-encoding,origin","Accept-Ranges":"bytes","Strict-Transport-Security":"max-age=63072000; includeSubDomains","X-Frame-Options"...` # Response Headers | **Header** | **Description** | **Example** | | ----------------------------------- | ---------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Accept-Ranges | HTTP response header: Accept-Ranges | bytes | | Access-Control-Allow-Headers | HTTP response header: Access-Control-Allow-Headers | Accept, Content-Type, Authorization, X-Request-UUID, X-Client-ID, X-Session-UUID, X-Container-UUID, X-User-UUID | | Access-Control-Allow-Methods | HTTP response header: Access-Control-Allow-Methods | GET, POST, DELETE, PUT | | Access-Control-Allow-Origin | HTTP response header: Access-Control-Allow-Origin | \* | | Cache-Control | Directives for caching mechanisms | no-cache | | CF-Cache-Status | HTTP response header: CF-Cache-Status | DYNAMIC | | CF-RAY | HTTP response header: CF-RAY | 84a7f22a48d08558-BOM | | Connection | HTTP response header: Connection | keep-alive | | Content-Disposition | HTTP response header: Content-Disposition | attachment; filename=*0\_\_11.11.11.100*.csv | | Content-Encoding | HTTP response header: Content-Encoding | gzip | | Content-Length | The length of the response body in bytes | 18 | | Content-Security-Policy-Report-Only | HTTP response header: Content-Security-Policy-Report-Only | script-src 'none'; connect-src 'none'; report-uri [https://csp-reporting.cloudflare.com/cdn-cgi/script\_monitor/report?m=B\_B6soD7YGzYAlUFBsUvlk1mMyliAFfjZDi7BHtB0es-1706009231-1-AaCzdDNhnWB\_73\_h-4uIj09q4RXvysGREuCt-7NhBb6sMKp7-IgGwS94-K6DgQK4hRvaBE2k47mzDHC9Dtj\_YWohaI\_bJCp5EGVLnzZzRqVsHcMTcaR6Sk-o9jF-d6AZu\_NBD2HyE9yaMkt46clOSa05bgN-Kd3auXDs2ScYN-p0](https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=B_B6soD7YGzYAlUFBsUvlk1mMyliAFfjZDi7BHtB0es-1706009231-1-AaCzdDNhnWB_73_h-4uIj09q4RXvysGREuCt-7NhBb6sMKp7-IgGwS94-K6DgQK4hRvaBE2k47mzDHC9Dtj_YWohaI_bJCp5EGVLnzZzRqVsHcMTcaR6Sk-o9jF-d6AZu_NBD2HyE9yaMkt46clOSa05bgN-Kd3auXDs2ScYN-p0); report-to cf-csp-endpoint | | Content-Type | The media type of the resource | application/json; charset=utf-8 | | Date | The date and time at which the message was originated | Wed, 24 Jan 2024 11:30:43 GMT | | Expect-CT | HTTP response header: Expect-CT | enforce, max-age=86400 | | Expires | The date/time after which the response is considered stale | 0 | | NEL | HTTP response header: NEL | \{"success\_fraction":0.01,"report\_to":"cf-nel","max\_age":604800} | | Pragma | HTTP response header: Pragma | no-cache | | Referrer-Policy | HTTP response header: Referrer-Policy | strict-origin-when-cross-origin | | Report-To | HTTP response header: Report-To | \{"endpoints":\[\{"url":"https\://a.nel.cloudflare.com/report/v3?s=81Kwazs1p5YGYVqautNdKNSUe7kIy76hWBBDLunHUSeZ08dRnTxLyl5RyeOaci0jrqM9e1Ry8z9FjY6KGbCTZVTG72TsxUWjBRudQcrY9RpF9OstYyZ6de7SDDlVqqC8i7Ul"}],"group":"cf-nel","max\_age":604800} | | Server | Information about the software used by the origin server | cloudflare | | Server-Timing | HTTP response header: Server-Timing | cf-q-config;dur=6.0000002122251e-06 | | Set-Cookie | HTTP response header: Set-Cookie | nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure, nginx-cloud-site-id=us-2a; path=/; HttpOnly; SameSite=Strict; Secure | | Strict-Transport-Security | HTTP response header: Strict-Transport-Security | max-age=63072000; includeSubDomains | | Transfer-Encoding | HTTP response header: Transfer-Encoding | chunked | | Vary | HTTP response header: Vary | accept-encoding,origin | | X-Content-Type-Options | HTTP response header: X-Content-Type-Options | nosniff | | X-Download-Options | HTTP response header: X-Download-Options | noopen | | X-Frame-Options | HTTP response header: X-Frame-Options | DENY | | X-Gateway-Site-ID | HTTP response header: X-Gateway-Site-ID | service-nginx-router-ap-south-1-prod-dc984846c-jc6vl | | X-Request-Uuid | HTTP response header: X-Request-Uuid | 22a7d1c4b1e0fbc505397c99b24660f7 | | X-Xss-Protection | HTTP response header: X-Xss-Protection | 1; mode=block |