Arnica
Connect Arnica to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Arnica connection as vulnerability scanning evidence. Automated collection is not available for this provider yet.
| Category | Vulnerability Scanning |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Arnica:
- Sign in to Arnica with an admin account.
- Navigate to Admin › API.
- Create an Arnica API key with read scopes only (the documented example scope is sbom-api:read), and copy the key.
Where to find the other values:
- Base URL (optional): Arnica's API reference is served from https://api.app.arnica.io (see https://api.app.arnica.io/swagger).
- Account / Org / Workspace (optional): Not documented by Arnica for API key use; leave empty unless Safeguard asks for it.
Arnica's public documentation does not cover every step.
The only public Arnica doc found that describes API key creation is the SBOM API page (Admin → API, scopes such as sbom-api:read). The full list of read scopes for findings and the exact button labels on the API page are not in the public docs; check the scope list on the page or the swagger reference. Docs do not say whether the key is shown only once.
Source: docs.arnica.io, checked 2026-10-07.
-
On Compliance › Connectors, open Arnica, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
Arnica publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Attestation | CC7.1 | 1 |
| ISO/IEC 27001 | Attestation | A.8.8 | 1 |
| HIPAA Security Rule | Attestation | 164.308(a)(1) | 1 |
| PCI DSS | Attestation | 6.3.3, 11.3.1 | 1 |
| NIST CSF 2.0 | Attestation | ID.RA-01 | 1 |
These tests are switched on per workspace by the Safeguard team.
Related
- Vulnerability Scanning connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks