Skip to main content Connector

Learn all about integrating into the Vulcan Platform

Updated over a week ago



Managed in the cloud and powered by Nessus technology, provides the industry's most comprehensive vulnerability coverage with the ability to predict which security issues to remediate first. It’s your complete end-to-end vulnerability management solution.

Why integrate into the Vulcan platform?

The Connector by Vulcan integrates with the platform to pull and ingest host-type assets and vulnerability data into your Vulcan Platform. Once the integration is complete, the Vulcan Platform scans the report's findings to correlate, consolidate, and contextualize the ingested data to impact risk and remediation priority based on your business context. Connector details

The Vulcan Platform ingests hosts and vulnerabilities through API.

Supported products


Vulnerability Assessment

Ingested asset type(s)


Integration type

UNI directional (data is transferred from to the Vulcan Platform in one direction)

Supported version and type

SaaS (latest)

Support Limitations

  • Terminated or deleted assets are not retrieved.

  • Only vulnerabilities seen in the last 30 days are retrieved.

  • Only licensed assets are retrieved.

Connector Setup

Prerequisites and user permissions

Before you begin configuring the connector, make sure to perform the following:

  • Create a user with permissions

  • Generate API Key and Secret Key

Create User and Permissions

  1. Go to > Settings > Access Control > Permissions > +Create Permission

  2. Set the permissions as shown below:

  3. Click Save.

  4. Create additional permission for tags fetching. make sure to select “Can Use” and “All Tags”

  5. Go to > Settings > Access Control > Create User

  6. Fill in the primary user details.

  7. For ROLE, select "Basic User".

  8. Then, enable the API Key option.

  9. For PERMISSIONS, select both of the permission you created earlier for the integration purpose.

  10. Click Save.

  11. Logout.

Generate Client API and Secret Key

  1. Login to using the User you created above.

  2. Go to Settings > My Account > API Keys

  3. Click Generate.

  4. Save the API Access Key and Secret Key somewhere safe.

Configuring the Connector

  1. Log in to your Vulcan Cyber dashboard and go to Connectors.

  2. Click on Add a Connector.

  3. Click on the icon.

  4. Set up the connector as follows:

    • First, insert the Servel URL of your instance.

    • Next, insert the API Access and Secret Keys you generated earlier.

  5. Optional: Check the "Send unsannced assets to Tenable" if relevant.

  6. Optional: If relevant, check the "Pull informational vulnerabilities from Tenable" option. Check this option if you want the Vulcan Platform to retrieve informational vulnerabilities in addition to Critical/High/Medium/Low vulnerabilities.

  7. Click the Test Connectivity button to verify that Vulcan Cyber can connect to your instance, then click Create (or Save Changes).

  8. Inactive Assets: You can configure a Vulcan rule to consider inactive assets, and Vulcan will remove assets that do not appear in scans within the configured time range.

  9. Allow some time for the sync to complete. Then, you can review the sync status under Log.

  10. To confirm the sync is complete, navigate to the Connectors tab to check the sync status. Once the icon shows Connected, the connection is complete. in the Vulcan Platform

Locating vulnerabilities in the Vulcan Platform

As discovers vulnerabilities, the Vulcan Platform Connector imports those vulnerabilities for reporting and action. You can view vulnerabilities via Connector by using the relevant filter:

  1. Open the Vulcan Platform dashboard and navigate to the Vulnerabilities.

  2. Click on the Search or filter vulnerabilities search box, start typing "Connector" or "Vulnerability source" or scroll to find these options and select one.

  3. Locate on the vulnerability source/Connector list and click to filter results.

  4. Click on any vulnerability to view further information.

Locating Host assets in the Vulcan Platform

To find all retrieved host assets from

  1. Open the Vulcan Cyber dashboard and navigate to Assets.

  2. Click on the Hosts tab.

  3. Click on the Search or filter websites input box and select Connector from the drop-down selection.

  4. Locate the option to view all synced assets.

Automating actions on vulnerabilities detected by

Large environments quickly become unmanageable if constant manual attention and effort are necessary to remediate vulnerabilities. You can take advantage of the automation capabilities of Vulcan Cyber and the Connector.

Click here to learn how to create automation in the Vulcan Cyber Platform.

From to the Vulcan Platform - Data Mapping

The Vulcan Platform integrates with through API to pull relevant vulnerabilities and assets data and map it into the Vulcan Platform.

Hosts mapping field

Vulcan field


Asset Uniqueness criteria

hostnames / netbios_names / fqdns/ ipv4s

Asset Name



Tracking Method


Asset details


Asset type


Asset IP


Asset OS


Asset OS Version


Asset Created date


Asset Last seen date


Asset FQDN


Asset Multiple mac addresses


Asset Tags - Vendor’s tags

Cloud source



Asset Tags - Additional

asset id + port.port + port.protocol + unique vulnerability id

Vulnerability instance uniqueness criteria


Vulnerability instance first seen


Vulnerability instance Last seen


Vulnerability instance status


Vulnerability instance port


Vulnerability instance protocol


Vulnerability instance packages

Unique vulnerability uniqueness criteria

Unique vulnerability title

cvss3_base_score / cvss_base_score

Unique vulnerability score


Unique vulnerability description

first_found,, plugin.solution,, plugin.vpr.score, plugin.cpe, plugin.cvss3_temporal_vector, plugin.publication_date, plugin.modification_date , plugin.cvss3_temporal_score

Unique vulnerability details


Unique vulnerability affected packages

plugin.cvss3_base_score / plugin.cvss_base_score

Unique vulnerability CVSS


Unique vulnerability CVE/S


Unique vulnerability CVSS attack vector

Solution uniqueness criteria

Tenable fix for

Solution title


Solution description


Solution references

Vulnerability status mapping status

Vulcan status





Vulnerability score mapping score

Vulcan score


Based on cvss3_base_score.


Status update mechanisms

Every day, the Vulcan Platform syncs with the vendor's platform to receive updates on existing vulnerabilities and assets and to retrieve new ones (if any were added).

The table below describes how the status update mechanism works in the connector for the vulnerabilities and assets ingested into the Vulcan Platform.

Update type


Archiving Assets

Assets are ”terminated” / “deleted” if the connector indicates the asset is no longer relevant and can be archived.

Change of vulnerability instances status from "Vulnerable" to "Fixed"

Vulnerability status changes to "fixed" in Vulcan upon the status change to "fixed" on the vendor's side.

Note: Asset or vulnerability updates on the vendor side are reflected on the Vulcan Platform only when the next scheduled connector sync time is complete.


API Endpoints in use

API version: 1.0


Use in Vulcan

Permissions required


Generate assets report

Basic User


Check assets report status

Basic User


Get assets chunk

Basic User


Generate vulnerabilities report

Basic User


Check vulnerability report status

Basic User


Get vulnerability chunk

Basic User

Data Validation

This document provides a step-by-step guide on validating and comparing data between Vulcan and Tenable.

Matching Assets

Goal: Validate the assets count between Tenable and Vulcan. Tenable’s hosts' count should match the Vulcan hosts' count.

In Tenable:

  1. On the left menu under "Explore," click on "Assets."

  2. Click on the "Hosts" tab and ensure no filter is applied.

In Vulcan:

Got to Assets and filter by connector

Matching Unique Vulnerabilities

Goal: Compare the count of unique vulnerabilities between Tenable and Vulcan. The UNique Vulnerability count in tenable should match the one in Vulcan.

In Tenable:

  1. On the left menu under "Explore," click on "Findings."

  2. Filter only by State: Active, Resurfaced, New.

  3. Group by Plugin (unique vulnerability name in Vulcan).

In Vulcan:

Go to Vulnerabilities and filter by Tenbale connector.

Matching Vulnerability Instances

Goal: Match the vulnerability instances count between Tenable and Vulcan.

In Tenable:

On Tenable's vulnerabilities view, vulnerability instances are counted under the column “Vuln count.”

This count should match the assets count under Vulcan’s unique vulnerabilities.

In Vulcan:

From the Assets view, click on a specific asset. In the vulnerability details, you should see the count of vulnerability instances (findings).

This count should match the vulnerability instances count under the single asset view in Tenable.

Did this answer your question?