Compliance ConnectorsSetup by categoryVulnerability Scanning
Nessus
Connect Nessus to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Nessus connection as vulnerability scanning evidence. Automated collection is not available for this provider yet.
| Category | Vulnerability Scanning |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Nessus:
- In Tenable Nessus, in the top navigation bar, click Settings. The About page appears.
- In the left navigation bar, click My Account, then click the API Keys tab.
- Click Generate, then click Generate again in the confirmation dialog.
- Copy the new API key that appears.
Where to find the other values:
- Base URL (optional): Your Nessus host and port, https://<Tenable Nessus host>:<port> (the API docs are at /api#/overview on the same host).
Source: docs.tenable.com, checked 2026-10-07.
-
On Compliance › Connectors, open Nessus, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
Nessus publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Attestation | CC7.1 | 1 |
| ISO/IEC 27001 | Attestation | A.8.8 | 1 |
| HIPAA Security Rule | Attestation | 164.308(a)(1) | 1 |
| PCI DSS | Attestation | 6.3.3, 11.3.1 | 1 |
| NIST CSF 2.0 | Attestation | ID.RA-01 | 1 |
These tests are switched on per workspace by the Safeguard team.
Related
- Vulnerability Scanning connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks