Works with your
existing security stack

Industry-standard vulnerability scanner. Covers network hosts, ports, services, authenticated local checks, web application scanning, and CIS/DISA STIG compliance auditing.

Tenable Security Center with distributed sensor architecture for continuous network vulnerability and compliance assessment at enterprise scale.

Qualys Vulnerability Management, Detection and Response — covers network assets, web application DAST, and policy compliance. All POD regions: US, EU, India, Canada, UK, Australia.

Rapid7 InsightVM network vulnerability assessment with live exposure analytics and full finding lifecycle mapping.

Open-source network vulnerability scanner (OpenVAS / Greenbone Community Edition). CSV export import covering hosts, services, and authenticated OS checks with CVE correlation.

Outpost 24 vulnerability assessment findings covering network and web application vulnerabilities. XML import.

BeyondTrust network vulnerability scanner findings imported via CSV export for centralised tracking and risk prioritisation.

Intruder continuous vulnerability scanner findings covering network exposure and web application issues. CSV import.

GFI Languard network security scanner findings — covers patch status, missing hotfixes, and network vulnerability alerts. XML import.

Metasploit Pro vulnerability scan and exploitation results imported via XML for validated finding tracking.

Nipper network device security audit results for routers, switches, and firewalls. XML and CSV import with CIS/DISA benchmark mapping.

Shodan API for external perimeter visibility — discovers internet-exposed services, open ports, banners, and misconfigurations across your IP ranges.

AlienVault USM vulnerability and threat data imported via CSV and XLS exports for unified risk tracking.

Amazon Inspector vulnerability findings for EC2 instances, Lambda functions, and ECR container images. JSON import with CVE and CVSS mapping.

Aqua Trivy open-source scanner for container images, filesystems, and IaC. JSON import covering OS packages and language library vulnerabilities.

Harbor OCI-compliant registry scan result ingestion. Tracks vulnerabilities across your entire container image catalogue as images are built and pushed.

Centraleyezer AgentSec endpoint agent for host-level vulnerability collection on assets where agentless scanning is not possible. Task-driven via the Centraleyezer agent API.

Wazuh agent-based security monitoring deployed on endpoints and servers. Feeds vulnerability data, security events, and SCA compliance check results into Centraleyezer.

Red Hat Satellite patch and vulnerability data ingestion for RHEL-based infrastructure. Tracks package-level vulnerabilities and errata across managed hosts.

Lynis host security audit findings covering system hardening, configuration weaknesses, and compliance checks across Linux and Unix systems.

PortSwigger Burp Suite Enterprise Edition web application DAST. XML and API import with full request/response evidence, OWASP classification, and issue confidence mapping.

Acunetix DAST web vulnerability scanner. XML and JSON import covering SQLi, XSS, SSRF, authentication bypass, and 7,000+ web vulnerability checks.

Detectify continuous DAST and external attack surface management via API. Covers web application vulnerabilities and exposed assets across your domains.

HCL AppScan On Cloud and AppScan SAST — covers dynamic web application testing and static source code analysis. API and file import.

OWASP Zed Attack Proxy open-source DAST findings. XML import covering active and passive scan results with OWASP classification.

Invicti (formerly Netsparker) web application security scanner findings. XML and JSON import with proof-based scanning results and CVSS mapping.

OpenText (HP) WebInspect dynamic application security testing findings. XML import covering web vulnerabilities, authentication flaws, and business logic issues.

Rapid7 AppSpider DAST scan results. XML import with full vulnerability detail, attack traffic evidence, and remediation guidance.

Nikto open-source web server scanner findings. XML import covering misconfigurations, dangerous files, outdated software, and server-level vulnerabilities.

w3af open-source web application attack and audit framework findings. XML import with OWASP-classified vulnerabilities.

WPScan WordPress vulnerability scanner findings. JSON import covering plugin, theme, and core vulnerabilities in WordPress installations.

Qualys SSL Labs API for TLS/SSL configuration assessment. Identifies weak cipher suites, expired certificates, BEAST/POODLE/CRIME exposure, and insecure protocol versions.

Mend.io (formerly WhiteSource) open-source vulnerability findings. JSON export import for centralised dependency risk tracking.

Application Security AppDetectivePro database vulnerability scanner. CSV import covering Oracle, SQL Server, MySQL, PostgreSQL, and DB2 misconfigurations and patch levels.

Imperva Scuba free database vulnerability scanner. File-based import covering database configuration weaknesses, patch levels, and CIS benchmark compliance across Oracle, SQL Server, MySQL, PostgreSQL, and DB2.

Microsoft Active Directory and generic LDAP authentication. Supports user provisioning, group-based role mapping, and nested group resolution.

Microsoft Entra ID (Azure Active Directory) via OAuth2 / OIDC for cloud-first and hybrid organisations.

Time-based one-time password (TOTP) two-factor authentication compatible with Google Authenticator, Authy, and any RFC 6238-compliant app.

Rule-based email alerts on finding creation, severity changes, SLA breaches, status transitions, and resolution. Configurable per project, asset, and network.

Import vulnerability findings from any XML-based scanner export — .nessus, Burp Suite XML, Acunetix XML, GFI Languard XML, Metasploit XML, OWASP ZAP XML, WebInspect XML, AppSpider XML, Nipper XML, Outpost 24 XML, XCCDF/ARF (SCAP), and more.

Import vulnerability findings from any JSON-based scanner export — Rapid7 InsightVM, AWS Inspector, Acunetix JSON, Trivy, Harbor, WPScan, Mend.io, Qualys JSON, and more.

Import vulnerability findings and bulk asset data from CSV exports — OpenVAS/Greenbone, BeyondTrust, AlienVault USM, AppDetectivePro, Intruder, and more. Also supports plain-text asset lists with custom field mapping.

Full REST API across findings, assets, projects, networks, users, roles, tags, categories, software, and permissions. JSON over HTTPS with token authentication.

Enables custom integration with any ticketing system, ITSM, SOAR, or orchestration platform.