Nucleus Security

Nucleus Security provides unified vulnerability management via integrations with third-party tools including threat intelligence, penetration testing, appsec, network scanners, and more.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices, Aggregated Security Findings, SaaS Applications

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Nucleus Security server.

2. API Key (required) - An API Key associated with a user account that has permissions to fetch assets.

3. Verify SSL - Select to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.

4. HTTPS Proxy (optional) - A proxy to use when connecting to the value supplied in Host Name or IP Address.

5. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

6. HTTPS Proxy Password (optional) - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Issues severity to fetch - Select the severity of issues to fetch. Only issues with the severity chosen are fetched. If no issues are selected, none are fetched.
2. Project IDs - Enter a list of project IDs to specify which projects you want to fetch from.
3. Asset types to fetch - Enter the Nucleus asset types to fetch, for example Host. Leave empty to fetch all asset types.
4. Fetch project risk score - Select this option to fetch the project risk score.
5. Page Size (Default: 1000) - Enter the number of items to fetch per API request. This setting controls the pagination size when retrieving devices and findings from Nucleus Security. Valid range: 1-1000.
6. Fetch findings via Data Export (AWS SaaS tenants only) (default: disabled) - Select this option to fetch findings through the latest available Data Export files for the configured projects. The adapter joins the exported findings and instances data before associating the findings with devices. Select this option only for AWS SaaS tenants that need to retrieve findings through Data Export.

APIs

Axonius uses the Nucleus API. The following endpoints are called:

• GET projects - Fetches the projects.
• GET projects/{project_id}/assets - Fetches the assets of each project, as Devices.
• POST projects/{project_id}/findings/search - Fetches the findings of each project.
• GET projects/{project_id}/risk_score - Fetches the project risk score. Called when Fetch project risk score is selected.
• GET projects/{project_id}/dataexport - Lists the available Data Export files. Called when Fetch findings via Data Export (AWS SaaS tenants only) is selected.
• POST projects/{project_id}/dataexport/{file_id} - Downloads a Data Export file. Called when Fetch findings via Data Export (AWS SaaS tenants only) is selected.

Supported From Version

Supported from Axonius version 4.5