SOLUTION OVERVIEW

Tenable.io Web Application Scanning for K2
Enhance Web Application Security Testing

Business Challenge
Todays web applications have seen a rise in the complexity anddeployment frequency to keep pace with demands of the modern business.
Even with an increased focus on security development, web applications
are still making it to production with critical vulnerabilities that areexploitable by cyber criminals. Oftentimes, when a vulnerability is found inproduction it's too late which drastically increases risk for exploitation andrequires more time and resources to fix.

TechnologyComponents• Tenable.io Web Application Scanning• K2 Security Platform

Solution
The K2 integration with Tenable.io Web Application Scanning (WAS)
enhances the visibility and information by monitoring the application
execution directly on the application server, while Tenable.io WAS
launches its scans. K2 supplement’s Tenable.io WAS by providing
additional detail on discovered vulnerabilities, including exact filename
and line of code where the vulnerability exists to help organizations locate
the vulnerability and remediate the issue. K2 has developed an innovativetechnology to detect “hidden” vulnerabilities in web applications during ascanning run by Tenable.io. The integration between K2 and Tenable gives
organizations the ability to generate a single unified report usingTenable.io APIs, reducing the time that would otherwise be needed tocorrelate two separate reports.

Value
By combining Tenable and K2 for the web application testing process,organizations benefit by reducing the remediation time needed to fix
discovered vulnerabilities and releases the web applications to production.
In addition, the integration of K2 with Tenable.io offers organizations theability to discover additional hidden vulnerabilities, reducing the number ofvulnerabilities that make it to production, and cutting down the number ofsuccessful attacks by cyber criminals when the application is in production.

• K2 Report Generator

Key Benefit• Get web applications to production inless time• Remediate discovered vulnerabilities
quickly• Pinpoint location of discoveredvulnerabilities quickly• Reduce the amount of vulnerabilities
that make it to production in web
applications• Help quickly identify possible false
positives

SOLUTION OVERVIEWFeatures
ABOUT T E N A B LETenable®, Inc. is the Cyber
Exposure company. Over 30,000
organizations around the globe
rely on Tenable to understand andreduce cyber risk. As the creator ofNessus®, Tenable extended its
expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 30 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

With this integration, you can:•View a single report of discovered vulnerabilities by both Tenable andK2•

Report on detailed vulnerability telemetry including vulnerable filename and specific line of code•

View a summary of vulnerable URLs and vulnerability type

How It Works
1. Add the K2 agent to the application server
2. Use K2's Report Generator after the Tenable.io WAS scan

ABOUT K 2
K2 Cyber Security delivers the Next
Generation Application Workload
Protection Platform tosecure web applications andcontainer workloads against
sophisticated attacks including
OWASP Top 10 and memory-based
attacks, and provides additionalvulnerability detection. K2’sPlatform is deployed on
production servers for runtime
protection of applications and on
pen-testing/pre-production
servers to identify the location of
the vulnerable code in real-time.
K2’s solution generates almost nofalse alerts, eliminates breaches
due to zero-day attacks, detects
attacks missed by traditional
security tools including Web
Application Firewalls, anddramatically reduces security cost.
K2 Cyber Security is locatedin the USA, and provides cybersecurity solutions globally.
Learn more at k2io.com

Security teams can use reporting that combines Tenable.io web applicationvulnerability insights with K2 to pinpoint the location of discovered vulnerabilities

More Information
Get the latest apps here:
https://www.tenable.com/products
https://www.k2io.com/free-trial/
For support please contact: support@k2io.com

COPYRIGHT 2020 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, LUMIN, ASSURE, AND THE
CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHER PRODUCTS OR SERVICESARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / K2 / 2