Scanner integrations for your
existing security stack

Industry-standard vulnerability scanner. Covers network hosts, ports, services, authenticated local checks, web application scanning, and CIS/DISA STIG compliance auditing.

Tenable Security Center with distributed sensor architecture for continuous network vulnerability and compliance assessment at enterprise scale.

Qualys Vulnerability Management, Detection and Response — covers network assets, web application DAST, and policy compliance. All POD regions: US, EU, India, Canada, UK, Australia.

Rapid7 InsightVM network vulnerability assessment with live exposure analytics and full finding lifecycle mapping.

Open-source network vulnerability scanner (OpenVAS / Greenbone Community Edition). CSV export import covering hosts, services, and authenticated OS checks with CVE correlation.

Outpost 24 vulnerability assessment findings covering network and web application vulnerabilities. XML import.

BeyondTrust network vulnerability scanner findings imported via CSV export for centralised tracking and risk prioritisation.

Intruder continuous vulnerability scanner findings covering network exposure and web application issues. CSV import.

GFI Languard network security scanner findings — covers patch status, missing hotfixes, and network vulnerability alerts. XML import.

Metasploit Pro vulnerability scan and exploitation results imported via XML for validated finding tracking.

Nipper network device security audit results for routers, switches, and firewalls. XML and CSV import with CIS/DISA benchmark mapping.

Shodan API for external perimeter visibility — discovers internet-exposed services, open ports, banners, and misconfigurations across your IP ranges.

AlienVault USM vulnerability and threat data imported via CSV and XLS exports for unified risk tracking.

Tripwire IP360 network vulnerability audits imported from the VnE console API — latest completed audit per network, with host and OS detail. CSV import also supported.

NERVE open-source network vulnerability scanner findings imported via CSV export.

Amazon Inspector vulnerability findings for EC2 instances, Lambda functions, and ECR container images. JSON import with CVE and CVSS mapping.

Prowler cloud security posture findings for AWS, Azure, GCP, and Kubernetes — imported live from the Prowler App API or via Prowler CLI OCSF output files.

Aqua Trivy open-source scanner for container images, filesystems, and IaC. JSON import covering OS packages and language library vulnerabilities.

Harbor OCI-compliant registry scan result ingestion. Tracks vulnerabilities across your entire container image catalogue as images are built and pushed.

Centraleyezer AgentSec endpoint agent for host-level vulnerability collection on assets where agentless scanning is not possible. Task-driven via the Centraleyezer agent API.

Wazuh agent-based security monitoring deployed on endpoints and servers. Feeds vulnerability data, security events, and SCA compliance check results into Centraleyezer.

Red Hat Satellite patch and vulnerability data ingestion for RHEL-based infrastructure. Tracks package-level vulnerabilities and errata across managed hosts.

Lynis host security audit findings covering system hardening, configuration weaknesses, and compliance checks across Linux and Unix systems.

PortSwigger Burp Suite Enterprise Edition web application DAST. XML and API import with full request/response evidence, OWASP classification, and issue confidence mapping.

Acunetix DAST web vulnerability scanner. XML and JSON import covering SQLi, XSS, SSRF, authentication bypass, and 7,000+ web vulnerability checks.

Detectify continuous DAST and external attack surface management via API. Covers web application vulnerabilities and exposed assets across your domains.

HCL AppScan Standard desktop DAST scanner — dynamic web application testing results imported via the scanner’s XML report export, with full test HTTP traffic evidence.

HCL AppScan on Cloud (ASoC) — dynamic web application testing and static source code analysis imported over the ASoC API with an API key. XML report import also supported.

HCL AppScan 360 self-managed platform — DAST and SAST results imported over the same AppScan REST API, pointed at your own AppScan 360 deployment.

OWASP Zed Attack Proxy open-source DAST findings. XML import covering active and passive scan results with OWASP classification.

Invicti (formerly Netsparker) web application security scanner findings. XML and JSON import with proof-based scanning results and CVSS mapping.

OpenText (HP) WebInspect dynamic application security testing findings. XML import covering web vulnerabilities, authentication flaws, and business logic issues.

Rapid7 AppSpider DAST scan results. XML import with full vulnerability detail, attack traffic evidence, and remediation guidance.

Nikto open-source web server scanner findings. XML import covering misconfigurations, dangerous files, outdated software, and server-level vulnerabilities.

w3af open-source web application attack and audit framework findings. XML import with OWASP-classified vulnerabilities.

WPScan WordPress vulnerability scanner findings. JSON import covering plugin, theme, and core vulnerabilities in WordPress installations.

Qualys SSL Labs API for TLS/SSL configuration assessment. Identifies weak cipher suites, expired certificates, BEAST/POODLE/CRIME exposure, and insecure protocol versions.

Barracuda web application scanner findings imported via CSV export with CWE and CVSS mapping.

Mend.io (formerly WhiteSource) open-source vulnerability findings. JSON export import for centralised dependency risk tracking.

Application Security AppDetectivePro database vulnerability scanner. CSV import covering Oracle, SQL Server, MySQL, PostgreSQL, and DB2 misconfigurations and patch levels.

Imperva Scuba free database vulnerability scanner. File-based import covering database configuration weaknesses, patch levels, and CIS benchmark compliance across Oracle, SQL Server, MySQL, PostgreSQL, and DB2.