Vulnerability scanners
Qualys VMDR
Your Qualys VMDR detections, read through the API or imported, checked against your tracking to see what really remains to fix.
What the connector does
TechWatchAlert reads Qualys VMDR in two ways: through the API, with a read-only account, the detections on each host and the details of each QID; or by importing scan results in XML or CSV and the XML Asset Data Report. Each detected CVE is compared with the status of its case in the project.
What comes into TechWatchAlert
- Hosts, ports and QIDs, with the CVEs and title of each QID
- One row per CVE, even when a QID cites several
- Through the API: new, active or reopened detections on each host, at every run
- Unconfirmed fixes and untracked CVEs
- The installed version and the fixed version, when the report provides them
Setup
- Through the API: create a user with the “Reader” role and “API Access”, limited to the asset groups to monitor
- In the project's connectors, choose Qualys VMDR, enter the platform (US1, EU2…), the account and its password, then run the connection test
- Or export scan results as XML or CSV and import them into Stack › Scans, by hand or via the API with a key holding the “scans” permission
In the same family
Tenable NessusYour Nessus scans checked against your cases: every unconfirmed fix stands out, host by host.View connector →Tenable Vulnerability ManagementOpen vulnerabilities from Tenable Vulnerability Management read through the API and checked against your cases, with no export to upload.View connector →Tenable Security CenterThe vulnerabilities of every host in your Tenable Security Center console, read through the API and checked against your tracking.View connector →Rapid7 InsightVM / NexposeYour InsightVM vulnerabilities read through the API, or your InsightVM and Nexpose exports imported, turned into fix tracking, host by host.View connector →Microsoft Defender Vulnerability ManagementThe vulnerabilities Defender sees on each machine, software by software, checked against your cases without deploying anything.View connector →CrowdStrike Falcon SpotlightThe open vulnerabilities of every endpoint protected by Falcon, read through the API with a single read scope.View connector →Greenbone / OpenVASYour Greenbone and OpenVAS reports checked against your monitoring, minus known false positives.View connector →TrivyYour Trivy reports uploaded by CI and checked against your cases, on every build.View connector →GrypeYour Grype reports checked against your tracking, with the evidence behind each match.View connector →
Connectors
Plug in your tools in minutes
Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.
Free plan, no credit card · hosted in France