Tenable Integration

Tenable Integration with TigerTrust

TigerTrust integrates with Tenable for certificate vulnerability management and compliance.

API Configuration

Configure Tenable.io integration:

yaml
1tenable:
2  access_key: $TENABLE_ACCESS_KEY
3  secret_key: $TENABLE_SECRET_KEY
4
5  features:
6    vulnerability_sync: true
7    asset_correlation: true
8    compliance_reports: true

Vulnerability Correlation

Correlate certificate vulnerabilities:

python
1# Tenable plugin IDs for SSL/TLS issues
2ssl_plugins = [
3    "10863",  # SSL Certificate Expiry
4    "51192",  # SSL Self-Signed Certificate
5    "15901",  # SSL Certificate Hostname Mismatch
6    "57582",  # SSL/TLS Protocol Detection
7    "65821",  # SSL RC4 Cipher Suites Supported
8]
9
10# Match Tenable findings with TigerTrust certificates
11vulnerabilities = tenable.get_findings(plugin_ids=ssl_plugins)
12tigertrust.correlate_vulnerabilities(vulnerabilities)

SSL/TLS Assessment

Comprehensive SSL analysis:

Compliance Reporting

Generate compliance reports:

yaml
1compliance_reports:
2  - name: PCI-DSS SSL Compliance
3    framework: pci-dss
4    controls:
5      - 4.1  # Strong cryptography
6      - 4.2  # Secure protocols
7    schedule: weekly
8
9  - name: NIST TLS Compliance
10    framework: nist-800-52
11    schedule: monthly

Asset Synchronization

Sync certificate assets with Tenable:

json
1{
2  "asset": {
3    "hostname": "api.example.com",
4    "type": "SSL Certificate",
5    "attributes": {
6      "common_name": "api.example.com",
7      "issuer": "DigiCert",
8      "expiry": "2024-12-31",
9      "key_size": 2048,
10      "protocol": "TLSv1.3"
11    }
12  }
13}

Risk Scoring

Prioritize certificate remediation:

• Combine Tenable CVSS with TigerTrust risk
• Factor in business criticality
• Account for exposure level
• Generate prioritized remediation list

Strengthen certificate security with Tenable and TigerTrust.