Tenable / Nessus
Scan findings and scanned assets from Tenable.io or Nessus, including how long findings have been open against your remediation SLA.
What CMDash reads
- Vulnerabilities
- Endpoint inventory
- Maturity telemetry
Syncs only read from Tenable / Nessus. Some integrations also support write-back actions on Command and Enterprise plans, such as opening a ticket or deactivating a user.
How you connect
An API key or token you create in the vendor console and enter in CMDash.
Once connected, CMDash syncs it every 4 hours by default. What it finds maps to your controls through rules you install or write.
Where this fits in your frameworks
- NIST Cybersecurity Framework 2.0 — Vulnerabilities feeds Identify (ID)
- ISO/IEC 27001:2022 — Vulnerabilities feeds Technological Controls
- CIS Controls v8.1 — Vulnerabilities feeds Vulnerability Management
- CMMC Level 2 — Vulnerabilities feeds Risk Assessment
- FedRAMP Moderate — Vulnerabilities feeds Risk Assessment
- SOC 2 Type II — Vulnerabilities feeds Risk Mitigation
- HITRUST CSF v11 — Vulnerabilities feeds Risk Management
- TISAX (VDA ISA v6) — Vulnerabilities feeds IT Security
- PCI DSS v4.0.1 — Vulnerabilities feeds Security Testing
- DORA — Vulnerabilities feeds Resilience Testing
- NYDFS Cybersecurity Regulation — Vulnerabilities feeds Penetration Testing & Vulnerability Assessment
- NIST SP 800-171 Revision 3 — Vulnerabilities feeds Risk Assessment
This is where Tenable / Nessus’s data is documented as relevant on our framework pages — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
Also in Vulnerability Management
Ready to see your posture?
Start a 30-day free trial of any paid plan — a card is required, and it converts unless you cancel — or sign up for Free with no card at all.