OP Innovate WASP

OP Innovate WASP is a solution that offers attack surface management capabilities for identifying vulnerabilities.

The OP Innovate WASP adapter provides Axonius with visibility into your attack surface management data, identifying vulnerabilities across various asset types.

Asset Types Fetched

• Devices
• Vulnerabilities
• SaaS Applications

Data Retrieved through the Adapter

The adapter retrieves information to provide visibility into your publicly accessible assets. The retrieved data for each asset type may include:

• Devices - Data such as ID, name, type, source, priority, status, risk score, security grade, and environment.
• Vulnerabilities - Data such as CVE IDs, products, finding type, title, exploitability, impact, overall risk, status, and CVSS score.
• SaaS Applications - Data regarding identified cloud-based resources and their associated security metadata.

Before You Begin

Required Ports

• TCP Port 443

Authentication Methods

• API Key

Required Permissions

The adapter connection requires that the user account associated with the API key has the following permissions:

• Read Access - Read-only access to assets and findings.

APIs

Axonius uses the WASP Assets API to retrieve device and vulnerability data.

📘

Note

The API documentation is not publicly available or hosted in a user portal. Contact your OP Innovate account representative to obtain the API documentation.

Generating OP Innovate WASP Credentials

1. Log in to the WASP web interface.
2. Navigate to Settings and select API Keys.
3. Generate a new API key.
4. Record the API Key and the API URL for your environment.

Supported from Version

This adapter is supported from Axonius version 8.0.12.

Connection Parameters

To connect the adapter in Axonius, provide the following parameters.

Required Parameters

1. Op Innovate WASP API URL - Enter the base URL for the WASP API.
2. API Key - Enter the API key generated from the WASP web interface.