SOLUTION OVERVIEW

Tenable for HashiCorp Vault

Automating Credentialed Vulnerability Assessments

Business Challenge
Organizations are constantly challenged with the ability to control, manageand monitor privileged access to its most valuable assets. Vulnerability scansrequire gaining access to and navigating an ever-changing sea of usernames,
passwords and privileges. Without integrating HashiCorp Vault and Tenable,
managing credentials becomes increasingly complex and assets could beleft at risk with an alarming increase in the attack surface.

TechnologyComponents
Tenable.io for:Solution
The Tenable® integration with HashiCorp Key Value (KV) version 1 & 2 andActive Directory (AD) delivers a comprehensive authenticated scanningsolution that provides security teams better vulnerability insight in order tofurther protect privileged accounts. This integration supports the storage ofprivileged credentials in HashiCorp Vault KV and their automatic retrieval atscan time by Tenable. This ensures that sensitive passwords are safely
stored, controlled, auditable and easily changed without manualintervention.

ValueThe Tenable integration for HashiCorp provides the ability to:• HashiCorp Vault v1.2.2+ Enterprise• HashiCorp Key Value (KV) version 1• HashiCorp Key Value (KV) version 2• HashiCorp Active Directory (AD)Tenable.sc 5.14.1+ for:• HashiCorp Vault v1.2.2+ Enterprise• HashiCorp Key Value (KV) version 1

Key Benefits• Eliminate risks from decentralized management of privileged oradministrative credentials• Automates credential retrieval
at scan time for deeper analysis• Simple management of credentials necessary for vulnerability
management assessments• Simplifies secure scanning withless management required• Meet government and industry compliance rules to account forthe management of organizational credentials• Fully automated credentialed scanning across your organization• Reduces time and effort needed for
credential additions and changes• Reduces the risk of unsecured
privileged accounts and credentials• Improve data accuracy withcredentialed scanning compared to
non-credentialed scanning

SOLUTION OVERVIEWAB OUT T E N AB LETenable®, Inc. is the Cyber
Exposure company. Over 30,000
organizations around the globe
rely on Tenable to understand andreduce cyber risk. As the creatorof Nessus®, Tenable extendedits expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 30 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

Features
With this integration, you can:• Perform credentialed scans of Windows Hosts• Perform credentialed scans of Unix (SSH) hosts• Perform credentialed scans of databases• Get a password stored in “secret”, this password will be used to login toevery machine in the scan

How It Works
1. Tenable requests a scan of asset(s) using HashiCorp Vault KV
credentials

AB OUT H AS H I CO R P

2. Nessus® requests credentials for the asset to be scanned

HashiCorp is the leader incloud infrastructure automation
software. Our suite of tools
enables organizations to provision,secure, connect, and run any
infrastructure for any application.
We unlock the cloud operating
model for every business andenable their digital transformation
strategies to succeed.
Learn more at hashicorp.com

3. HashiCorp Vault KV provides the credentials for the asset
4. Nessus scans the asset using the provided credentials

2134ASSET

More Information
Installation and configuration documentation:
https://docs.tenable.com/integrations/hashicorp/vault/Content/welcome.htm
For support please contact: support@tenable.com

COPYRIGHT 2019 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, LUMIN, ASSURE, AND THE
CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHER PRODUCTS ORSERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / HashiCorp / 2