TechWatchAlert
Vulnerability scanners

CrowdStrike Falcon Spotlight

The open vulnerabilities of every endpoint protected by Falcon, read through the API with a single read scope.

What the connector does

The connector reads, through the CrowdStrike API, the open or reopened vulnerabilities that Falcon Spotlight finds on each endpoint, with the affected application. All it needs is an API client with the “Vulnerabilities: Read” scope.

What comes into TechWatchAlert

  • Open or reopened vulnerabilities on each endpoint, one row per CVE
  • The application affected by each vulnerability
  • Endpoints, matched with the machines already known in your fleet
  • Unconfirmed fixes and untracked CVEs

Setup

  1. In the Falcon console, create an API client with only the “Vulnerabilities: Read” scope
  2. Note its client ID, its secret and your account's cloud (US-1, US-2, EU-1…)
  3. Enter them in TechWatchAlert, then run the connection test

In the same family

Connectors

Plug in your tools in minutes

Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.

Talk to the team

Free plan, no credit card · hosted in France