Tenable Integration with DefectDojo
Tenable is a comprehensive exposure management platform that provides vulnerability management, cloud security, identity exposure detection, web application scanning, and operational technology security to identify, prioritize, and remediate security risks across IT infrastructure, cloud environments, containers, identities, and critical infrastructure using risk-based vulnerability assessment and threat intelligence. The platform combines continuous asset discovery with AI-powered analytics through ExposureAI to deliver unified visibility across modern attack surfaces, prioritize exposures based on business impact and exploitability rather than CVSS scores alone, and provide actionable remediation guidance with compliance reporting aligned with PCI-DSS, HIPAA, NIST, and other regulatory standards throughout the enterprise security lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Tenable results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Tenable",
"engagement": "<engagement-id>",
"file": "results.json"
}