Integraciones

Importa desde 202 herramientas de seguridad

Esta lista se genera directamente del registro de parsers de Tandera. Si una herramienta aparece aquí, existe un parser para ella en el código.

215 formatos de importación en 202 herramientas. Varias publican más de un formato de informe.

215 / 215

  • Acunetix Scan
  • Alert Logic Scan
  • Anchore Engine Scan
  • Anchore Enterprise Policy Check
  • Anchore Grype
  • Anchore Grype detailed
  • AnchoreCTL Policies Report
  • AnchoreCTL Vuln Report
  • AppCheck Web Application Scanner
  • AppSpider Scan
  • Aqua Scan
  • Arachni Scan
  • AuditJS Scan
  • AWS Inspector2 Scan
  • AWS Prowler Scan
  • AWS Prowler V3
  • AWS Security Finding Format (ASFF) Scan
  • AWS Security Hub Scan
  • Azure Security Center Recommendations Scan
  • Bandit Scan
  • Bearer CLI
  • Blackduck Binary Analysis
  • Blackduck Component Risk
  • Blackduck Hub Scan
  • Brakeman Scan
  • BugCrowd Scan
  • Bundler-Audit Scan
  • Burp Dastardly Scan
  • Burp Enterprise Scan
  • Burp GraphQL API
  • Burp REST API
  • Burp Scan
  • Burp Suite DAST Scan
  • CargoAudit Scan
  • Checkmarx CxFlow SAST
  • Checkmarx One Scan
  • Checkmarx OSA
  • Checkmarx Scan
  • Checkmarx Scan detailed
  • Checkov Scan
  • Chef Inspect Log
  • Choctaw Hog Scan
  • Clair Scan
  • Cloudflare Insights
  • Cloudsploit Scan
  • Cobalt.io Scan
  • Codechecker Report native
  • Contrast Scan
  • Coverity API
  • Coverity Scan JSON Report
  • Crashtest Security JSON File
  • Crashtest Security XML File
  • CredScan Scan
  • Crunch42 Scan
  • Cyberwatch scan (Galeax)
  • CycloneDX Scan
  • Cycognito Scan
  • DawnScanner Scan
  • Deepfence Threatmapper Report
  • Dependency Check Scan
  • Dependency Track Finding Packaging Format (FPF) Export
  • Detect-secrets Scan
  • docker-bench-security Scan
  • Dockle Scan
  • DrHeader JSON Importer
  • DSOP Scan
  • Duroc Hog Scan
  • ESLint Scan
  • Essex Hog Scan
  • Fortify Scan
  • Generic Findings Import
  • Ggshield Scan
  • Github SAST Scan
  • Github Secrets Detection Report Scan
  • Github Vulnerability Scan
  • GitLab API Fuzzing Report Scan
  • GitLab Container Scan
  • GitLab DAST Report
  • GitLab Dependency Scanning Report
  • GitLab SAST Report
  • GitLab Secret Detection Report
  • Gitleaks Scan
  • Google Cloud Artifact Vulnerability Scan
  • Gosec Scanner
  • Gottingen Hog Scan
  • Govulncheck Scanner
  • Govulncheck Scanner V2
  • HackerOne Cases
  • Hadolint Dockerfile check
  • Harbor Vulnerability Scan
  • HCL AppScan on Cloud SAST XML
  • HCLAppScan XML
  • Horusec Scan
  • Humble Json Importer
  • HuskyCI Report
  • Hydra Scan
  • IBM AppScan DAST
  • Immuniweb Scan
  • IntSights Report
  • Invicti Scan
  • IriusRisk Threats Scan
  • JFrog Xray API Summary Artifact Scan
  • JFrog Xray On Demand Binary Scan
  • JFrog Xray Scan
  • JFrog Xray Unified Scan
  • KICS Scan
  • Kiuwan SCA Scan
  • Kiuwan Scan
  • KrakenD Audit Scan
  • kube-bench Scan
  • Kubeaudit Scan
  • KubeHunter Scan
  • Kubescape JSON Importer
  • Legitify Scan
  • Mayhem SARIF Report
  • Mend Scan
  • Meterian Scan
  • Microfocus Webinspect Scan
  • MobSF Scan
  • MobSF Scorecard Scan
  • Mobsfscan Scan
  • Mozilla Observatory Scan
  • MSDefender Parser
  • n0s1 Scanner
  • Nancy Scan
  • Netsparker Scan
  • NeuVector (compliance)
  • NeuVector (REST)
  • Nexpose Scan
  • Nikto Scan
  • Nmap Scan
  • Node Security Platform Scan
  • Nosey Parker Scan
  • NPM Audit Scan
  • NPM Audit v7+ Scan
  • Nuclei Scan
  • OpenReports
  • Openscap Vulnerability Scan
  • OpenVAS Parser
  • OpenVAS Parser v2
  • Orca Security Alerts
  • ORT evaluated model Importer
  • OssIndex Devaudit SCA Scan Importer
  • OSV Scan
  • Outpost24 Scan
  • PHP Security Audit v2
  • PHP Symfony Security Check
  • PICUS Scan
  • PingCastle
  • pip-audit Scan
  • PMD Scan
  • Popeye Scan
  • Progpilot Scan
  • Prowler Scan
  • PTART Report
  • PWN SAST
  • Qualys Hacker Guardian Scan
  • Qualys Infrastructure Scan (WebGUI XML)
  • Qualys Scan
  • Qualys VMDR
  • Qualys Webapp Scan
  • Rapplex Scan
  • Red Hat Satellite
  • Retire.js Scan
  • ReversingLabs Spectra Assure
  • Risk Recon API Importer
  • Rubocop Scan
  • Rusty Hog Scan
  • SARIF
  • Scantist Scan
  • Scout Suite Scan
  • Semgrep JSON Report
  • Semgrep Pro JSON Report
  • SKF Scan
  • Snyk Code Scan
  • Snyk Issue API Scan
  • Snyk Scan
  • Solar Appscreener Scan
  • SonarQube Scan
  • SonarQube Scan detailed
  • Sonatype Application Scan
  • SpotBugs Scan
  • SSH Audit Importer
  • SSL Labs Scan
  • Sslscan
  • Sslyze Scan
  • SSLyze Scan (JSON)
  • StackHawk HawkScan
  • Sysdig CLI Report
  • Sysdig Vulnerability Report
  • Talisman Scan
  • Tenable Scan
  • Terrascan Scan
  • Testssl Scan
  • TFSec Scan
  • Threagile risks report
  • ThreatComposer Scan
  • Trivy Operator Scan
  • Trivy Scan
  • Trufflehog Scan
  • Trufflehog3 Scan
  • Trustwave Fusion API Scan
  • Trustwave Scan (CSV)
  • Twistlock Image Scan
  • VCG Scan
  • Veracode Scan
  • Veracode SourceClear Scan
  • Wapiti Scan
  • Wazuh
  • WFuzz JSON report
  • Whispers Scan
  • WhiteHat Sentinel
  • Wiz Scan
  • Wpscan
  • ZAP Scan

¿No ves tu herramienta? Los hallazgos también pueden entrar por el formato genérico de importación o por la CLI.

acceso anticipado

Consigue Tandera antes de tu próximo engagement.

Únete a la waitlist para acceso anticipado. Estamos incorporando equipos de pentest por oleadas.

Onboarding prioritario para equipos de pentest.
Línea directa con quienes lo construyen.
Precio de acceso anticipado, asegurado.

Sin spam, sin tarjeta. Cancela cuando quieras.

enespt-br