Integrations: find the right screen

Every screen in this module, what each one is for, and where it lives. Use it to find the right screen quickly, and to confirm you are on the one a colleague means — several screens in this product have similar names and different jobs.

Screenshots come from a demonstration data set, so the figures are illustrative. Click any screenshot to open it at full resolution.

Acunetix

Dynamic application scanning.

Setting → Integration → Acunetix

AppScan

Application security testing, static and dynamic.

Setting → Integration → AppScan

Burp Suite

Dynamic application testing. Findings arrive against the URL that was tested.

Setting → Integration → Burp Suite

Checkmarx

Static application security testing. Projects map to NxSAM applications.

Setting → Integration → Checkmarx

Checkmarx SCA

Software composition analysis — third-party libraries and their known vulnerabilities.

Setting → Integration → Checkmarx SCA

Checkmarx Standalone SCA

SCA run independently of the main Checkmarx platform.

Setting → Integration → Checkmarx Standalone SCA

Cortex CSPM

Palo Alto's posture platform, feeding the CSPM screens rather than the Prisma ones. Master Sync brings rules and policies; Sync brings assets, issues and cases against them — in that order.

Setting → Integration → Cortex CSPM

Cortex XDR

Host insight findings as a Network VA source. Shown here in its unconfigured state.

Setting → Integration → Cortex XDR

Dependency Track

Continuous composition analysis from an SBOM rather than from a scan.

Setting → Integration → Dependency Track

Fortify

Static application security testing.

Setting → Integration → Fortify

Gitleaks

Secrets detection — credentials committed into source control.

Setting → Integration → Gitleaks

JFrog Xray

Composition analysis over artefacts held in Artifactory.

Setting → Integration → JFrog Xray

Netsparker

Dynamic application scanning.

Setting → Integration → Netsparker

Nexpose Upload Mapping

Which column of a Nexpose export carries each date NxSAM needs, and whether it is mandatory.

Setting → Integration → Nexpose Upload Mapping

Prisma Cloud

Container security. Connects to the registry scan results and the collections they belong to.

Setting → Integration → Prisma Cloud

Prisma Cloud (Twistlock) Connection

The connection to the container scanner: endpoint, port and credentials.

Setting → Integration → Prisma Cloud (Twistlock) Connection

Prisma Cloud CSPM

Cloud posture. Separate from the container integration even though the vendor is the same.

Setting → Integration → Prisma Cloud CSPM

SentinelOne CSPM

An alternative cloud posture source, feeding the CSPM screens. One Data Sync brings everything.

Setting → Integration → SentinelOne CSPM

Snyk Code

Static analysis of source code.

Setting → Integration → Snyk Code

Tenable

Network VA. Credentials, plus the column mapping that decides how the report's dates and keys are read.

Setting → Integration → Tenable

Vulnerability Mapping — Checkmarx

How this tool's identifiers line up with the catalogue, so the same weakness from two tools is one finding rather than two.

Setting → Vulnerability Master Mapping → Vulnerability Mapping — Checkmarx