Vulnerabilities Connector

The Vulnerability provider connects your application to your customers' vulnerability management platforms. Synqly supports querying vulnerability findings and assets from the vulnerability management platforms.

Pagination

The Vulnerability connector implements pagination using a cursor. Responses return a field called cursor, which must be included in the next GET request to retrieve the next page of results until the end is reached, at which point an empty string value is returned for the cursor. The cursor, though opaque, contains all parameters for limit, next-page, search filters, etc., so that when paginating, these parameters can be omitted from the request. Explicit query parameters are not used when a previously returned non-empty cursor is passed in. If the cursor field is not included in the request or is an empty string, the first page of all results will be returned.

The number of results returned is controlled with the limit query parameter. The default limit is 50.

API Reference

For full API documentation see the Vulnerabilities API Reference.

To create an integration with the Vulnerabilities connector, use the Create Integration API endpoint, using one of the provider configs below.

Supported Providers

  • CrowdStrike Falcon® Spotlight (vulnerabilities_crowdstrike)
  • Nucleus Vulnerability Management (vulnerabilities_nucleus)
  • Qualys Vulnerability Management, Detection & Response (VMDR) (vulnerabilities_qualys_cloud)
  • Rapid7 InsightVM (vulnerabilities_rapid7_insight_cloud)
  • ServiceNow Vulnerability Response (vulnerabilities_servicenow_vr)
  • Tanium Vulnerability Management (vulnerabilities_tanium_cloud)
  • Tenable Vulnerability Management (vulnerabilities_tenable_cloud)
  • [MOCK] Qualys Vulnerability Management, Detection & Response (VMDR) (vulnerabilities_qualys_cloud_mock)
  • [MOCK] Rapid7 Insight Vulnerability Management Cloud (vulnerabilities_rapid7_insight_cloud_mock)
  • [MOCK] Tsanium Vulnerability Management (vulnerabilities_tanium_cloud_mock)

Supported Operators by Provider

APICrowdStrike Falcon® SpotlightNucleus VMQualys VMDR[MOCK] Qualys VMDRRapid7 InsightVM[MOCK] Rapid7 InsightVM CloudServiceNow Vulnerability ResponseTanium VM[MOCK] Tanium Vulnerability ManagementTenable VM
create_asset
update_asset
query_assets
update_finding
create_findings
query_findings
get_scan_activity
query_scans

APIs with Filters

APICrowdStrike Falcon® SpotlightNucleus VMQualys VMDR[MOCK] Qualys VMDRRapid7 InsightVM[MOCK] Rapid7 InsightVM CloudServiceNow Vulnerability ResponseTanium VM[MOCK] Tanium Vulnerability ManagementTenable VM
query_assets✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]
query_findings✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]✅ [docs]