Tenable Vulnerability Management is a cloud-based platform that helps you stay ahead of security risks by detecting vulnerabilities across all your connected assets. Whether it’s servers, network devices like routers, switches, and firewalls, office peripherals such as IP-based printers, or employee workstations — if it has an IP address, Tenable vulnerability management can assess it.

Note: Tenable Vulnerability Management® was previously known as Tenable.io. Throughout this guide, the terms “Tenable” and “Tenable Vulnerability Management” are used interchangeably — they both refer to the same platform.

By continuously scanning your environment, Tenable vulnerability management gives you a clear picture of your security posture and helps you prioritize the issues that matter most.

To dive deeper into Tenable’s features and capabilities, see the official Tenable Vulnerability Management documentation.

This guide walks you through integrating Tenable Vulnerability Management with Hyver. Once connected, Hyver can automatically ingest and import assets from your Tenable environment — along with their associated findings — so you can see the full picture of your vulnerabilities in one place. These findings impact your maturity score and Exposure value.

Beyond importing data, Hyver also adds findings related to the integration itself, helping you identify and address issues in configuration and daily operations. This includes checking for common misconfigurations such as incorrect trust settings, improper permissions, or overly broad access levels.

By combining Tenable’s scanning power with Hyver’s risk analysis, you can quickly spot where technical gaps and process issues intersect — and take action to close them.

Before setting up the integration, make sure you have the following in place:

For the integration to work smoothly, you may need to allow traffic from Hyver’s servers in your firewall or network configuration. This ensures that Hyver can securely connect to your environment and perform scans without being blocked.

Depending on your region and the type of scan, add the following IP addresses:

In most cases, you only need to add the IPs relevant to your region and use case.

This section explains how Hyver’s Multi-Company Dashboard works in general, and how integrations behave when used in a Multi-Company setup.

Hyver’s Multi-Company Dashboard is designed for large enterprises with multiple subsidiaries. It gives you:

To enable Multi-Company, contact your CYE Technical Account Manager.

Here’s the important part:

To get the most out of Multi-Company with integrations, we recommend:

In this section, we’ll walk through the steps to set up the integration between Tenable Vulnerability Management and Hyver. As part of the process, you’ll also learn how to generate the required API keys in Tenable — so you can enter them into Hyver and complete the connection.

The setup is straightforward and only takes a few steps.

Before Hyver can start creating findings from Tenable data, you’ll need to:

Once that’s done, Hyver can securely pull assets and findings from Tenable into your environment.

Follow these steps to connect Tenable Vulnerability Management with Hyver:

To generate the API Access Key and API Secret Key in Tenable:

If the connection test fails:

When configuring this integration, keep the following in mind:

Once the connection is set up, Hyver automatically creates a new technology asset with the following mandatory details:

This new asset is also automatically mapped to the NIST Cybersecurity Framework (CSF).

In Hyver, technologies represent security tools and systems that can strengthen your organization’s maturity in specific NIST CSF subcategories. They’re factored directly into maturity level calculations, helping you measure how much each tool contributes to improving your cybersecurity posture.

Once you save the integration details, here’s what happens automatically:

Collected endpoints are the specific data sources that Hyver connects to within an external platform. They define which information is pulled into Hyver for analysis and risk assessment.

For the Tenable Vulnerability Management integration, Hyver collects data from the following endpoints:

By collecting this information, Hyver can connect Tenable’s technical findings with its own risk modeling, ensuring both vulnerabilities and the way Tenable is managed are reflected in your organization’s cyber risk picture.

When Tenable Vulnerability Management is integrated with Hyver, the following types of findings may be created:

All Tenable findings in Hyver are linked to NIST subcategories and contribute to the Hyver Maturity assessment.

Once the integration is successfully set up, Hyver automatically examines the configuration and setup of your Tenable VM instance. If it detects misconfigurations or gaps in the way Tenable is being used, Hyver generates findings to highlight these issues:

In the Maturity screen, you’ll see:

To remove an existing integration:

Note: When you delete an integration in Hyver, the connection is immediately terminated. No new data from that integration will be ingested or processed. However, any existing data already in Hyver remains available.

Once an integration is set up, you can update its details at any time:

In this article, we covered how to integrate Tenable Vulnerability Management with Hyver — from prerequisites and API key creation to completing the setup and verifying the connection. We reviewed post-save outcomes, where to view findings, the maturity impact, and examples of Tenable findings. We also explained how to edit or delete the integration and troubleshoot common errors, helping you connect the platforms for better visibility and cyber risk management.