Tenable.io Connection

Connects your agent to Tenable.io for vulnerability management. Query vulnerabilities by severity, asset, and plugin. Pull scan results and compliance check data. Read-only access.

Authentication

API keys. Generate from Tenable.io > Settings > My Account > API Keys.

• access_key — Tenable.io access key
• secret_key — Tenable.io secret key

Endpoints

Vulnerabilities

• GET /workbenches/vulnerabilities — List vulnerabilities with severity and state filters
• GET /workbenches/vulnerabilities/{plugin_id}/info — Get vulnerability detail by plugin
• GET /workbenches/vulnerabilities/{plugin_id}/outputs — Get affected hosts

Assets

• GET /workbenches/assets — List assets with filters (OS, last scan, network)
• GET /workbenches/assets/{id}/info — Get asset detail (IPs, OS, installed software)
• GET /workbenches/assets/{id}/vulnerabilities — Get vulnerabilities for a specific asset

Scans

• GET /scans — List scan history with status and schedule
• GET /scans/{id} — Get scan result with host-level detail

Compliance

• GET /compliance/export — Export compliance check results

Rules

• Rate limit: 40 requests/second (Tenable.io standard)
• Large vulnerability exports use the async export API — agent polls for completion
• The agent prioritizes vulnerabilities by CVSS score, exploit availability, and asset criticality
• Scan launch is not supported — agent only reads existing scan data