Plugin Configuration Guideline
SourceGuard integrates Tenable Vulnerability Management (VM) directly into its platform via a native plugin architecture.
This provides a unified risk perspective extending from infrastructure down to compiled binaries and OS kernel components—filling blind spots in the software supply chain that traditional network/host scanning tools often miss, and accelerating remediation scheduling.
After completing this guide, you will be able to:
-
Enable the Tenable VM plugin in SourceGuard and make it a controllable scan source.
-
Correctly input Tenable authentication information to establish an API connection.
-
Configure Scan Templates to ensure Tenable scans triggered by SourceGuard align with your existing settings.
-
View correlated results between Tenable telemetry and SourceGuard binary findings within SourceGuard.
Step 1: Access the Plugins Page After logging into SourceGuard, click Plugins in the left navigation bar. The system will list supported external scanning tools that can be directly launched and managed, including the Tenable Vulnerability Management Centre SourceGuard Plugin. Tenable Vulnerability Management is a native scan source, and its scan results will be incorporated into the unified risk view alongside SourceGuard’s binary analysis results.
Step 2: Configure Settings On the plugin card, click Details to open the Edit Plugin Configuration window. Plugin Information: Set Scan Mode to "Prefer Existing Report" (to avoid redundant scans). Set Location / URL to https://cloud.tenable.com (or your company's private URL). Authentication Settings: Input your API Key, Secret Key, and Agent Key retrieved from the Tenable backend. Scan Settings: (Optional) Enter your Agent Scan Template ID and Network Scan Template ID if you want to override default behaviour. Step 3: Test and Save Click the Test Connection button to verify the integration. Once the connection is successful, close the window (click the X). SourceGuard will begin synchronising data based on your scan mode.
Create a Project and Assign the Scanner Once the plug-in setup has been completed, follow the instructions below to start a new scan: Click Create Project on the Project Management page Fill in Project Details: System Category — select or define the category this project belongs to. Risk Level and Importance Score — set the baseline risk classification for this project. Project Description — optional free-text context for the project. Select Tenable Vulnerability Management Centre Source Guard Plugin. Project Name — Name the project clearly to facilitate stakeholder alignment and reporting. Scan Mode: - Prefer Existing Report: reuses the latest available Tenable scan report; faster, avoids redundant scans. - Always Trigger Scan: forces a fresh Tenable scan on every run; ensures the most current data, but takes longer and consumes Tenable scan capacity.
Add Assets & Launch scan Add Assets: Click + Add Asset for every target. Asset Settings: Define the following for each: Credential Source: Preset (saved credential) or Manual (one-off). SSH Credential: Select the relevant saved credential. Port number Config Name: Label for the network segment or asset group. IP Addresses/Ranges: Input the target IP range (e.g., 192.168.4.10-192.168.4.20). Validate: Click Check Connection (individual) or Test All Connections (bulk) to ensure the infrastructure is reachable. Finalise: Click Create Project (or Save Changes) to begin the scan job.
Tech Support
Get help from the SourceGuard team — for product issues, integration questions, or anything in between.
For Tenable Joint Customers
Joint customers using the Tenable integration can reach the same support channel:
Tech Support Team