Nessus and SecurityCenter APIs and Data Internals Published
Note: Tenable SecurityCenter is now Tenable.sc. To learn more about this application and its latest capabilities, visit the Tenable.sc web page.
Tenable has published API reference guides for the Nessus and SecurityCenter 4 XMLRPC interfaces. We've also added a "Products APIs and Data Internals" topic area on the Tenable Discussion Forums. This area allows Tenable product users to ask questions about the APIs and share code.
The Nessus API allows users to interact with the Nessus scanner in an automated fashion. For example, scans can be created and reports can be downloaded. The Nessus App for iPhone as well as the flash interface in Nessus 4.2 all make use of the XMLRPC interface.
The SecurityCenter API allows enterprise users to receive vulnerability, patch, configuration, log, alert, event and much more. Sophisticated filters can be used to obtain vulnerability or log data for custom dashboards, reports and analytics. The API also allows for static asset lists to be uploaded for integration with a variety of asset inventory devices.
In addition to the XMLRPC interface APIs, the "Products APIs and Data Internals" topic area also serves as a focal point to discuss data internals of our products. For example, Nessus stylesheets can be used to customize reports. New stylesheets have been posted to this area with recommendations and feedback from Tenable engineers and customers.
Both APIs are available to customers on the Tenable Support Portal. The Nessus XMLRPC API is also available to the public on the Nessus documentation page.
Related Articles
Unified IT and Web App Security: On-Prem Web App Scanning Integrated into Security Center
October 17, 2023On-prem web app scanning is now available within Tenable Security Center, offering comprehensive exposure management with accurate analysis, OWASP Top 10 coverage and easy setup. Here’s what you need to know.
What Is VPR and How Is It Different from CVSS?
April 16, 2020This blog series will provide an in-depth discussion of vulnerability priority rating (VPR) from a number of different perspectives. Part one will focus on the distinguishing characteristics of VPR th...
Tenable Releases SecurityCenter Continuous View
August 9, 2012<p>Today, Tenable <a href="http://www.tenable.com/news-events/press-releases/2012-tenable-network-security-unveils-securitycenter-continuous-view" target="_self" title="Tenable Network Security Unveils SecurityCenter Continuous View">announced </a>the availability of a new edition of SecurityCenter, called Continuous View.</p> <p>This edition of SecurityCenter uniquely encompasses both scanning and monitoring, with the inclusion of Tenable's Passive Vulnerability Scanner (PVS). That makes SecurityCenter Continuous View uniquely capable of addressing vulnerability, configuration, and compliance management requirements for emerging technologies like mobile devices, cloud-based services, social applications, and virtual systems.</p> <p>The flexible licensing approach provided by SecurityCenter Continuous View allows enterprise customers to deploy PVS in much the same way as they do with Nessus within SecurityCenter, pretty much as many as needed.</p> <p>Existing SecurityCenter customers can upgrade to a ContinuousView license and begin to enjoy the benefits of continuous monitoring with PVS. These include:</p> <ul> <li>Real-time identification of server and client vulnerabilities </li> <li>Identification of mobile devices and their vulnerabilities </li> <li>Passive discovery of all internal and external web servers and databases </li> <li>Identification of trust and communication paths </li> <li>Passive monitoring of virtual environments </li> </ul>
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- SecurityCenter