Tenable APIConnect Tenable without building on its API
Tenable has a REST API. Customers only: API keys are generated per user account in Tenable Vulnerability Management, subject to role and license. If you're reading the docs because you need Tenable to talk to the rest of your stack, Caddi does that without you writing or maintaining integration code: you show it the job once, and it runs it across Tenable and your other tools.
- APIREST (JSON)
- AuthAPI key
- AccessSelf-serve for customers
What the Tenable API gives you
- Type
- REST (JSON)
- Authentication
- API key (access key + secret key in the X-ApiKeys header)
- Who can get access
- Customers only: API keys are generated per user account in Tenable Vulnerability Management, subject to role and license.
- What it covers
- Assets, vulnerabilities (including bulk vulnerability and asset exports), scans, scanners, agents, users and tags.
- Limits
- Dynamic per-user requests-per-minute limits based on platform load, and requests over the limit get HTTP 429 with a Retry-After header (no fixed number is published).
Official docs: developer.tenable.com. Checked September 2026. Vendors change access terms, so confirm with Tenable before you build.
Building on the Tenable API vs. having Caddi run it
| The job | Build it on the API | With Caddi |
|---|---|---|
| Getting access | Register an app, get Tenable credentials, and manage tokens and refreshes. | Connect your Tenable account once. Caddi holds the connection. |
| Writing the integration | A developer maps fields, handles pagination, retries and rate limits, and writes the sync. | You show Caddi the Tenable task the way you'd train a new hire. It writes verified code for it. |
| Steps the API doesn't cover | Screens with no endpoint stay manual, or need a separate RPA tool. | Caddi uses a secure, audited browser session where there's no API, in the same automation. |
| The other systems in the loop | Each extra tool is another API, another set of credentials, another integration to own. | One automation runs across all the tools the job touches. |
| Keeping it running | Someone owns the code when the API version, fields or your process change. | Every automation is reviewed before it runs in production, and every run is logged. |
Building on the API is the right call when you have engineers and the integration is your product. When the goal is getting Tenable work off someone's desk, the build is the slow part.
What teams usually want the Tenable API for
Export and route findings
Caddi exports the latest Tenable vulnerability report, reformats it, and emails findings to each owner.
Build the tracker
Caddi pulls Tenable scan results and compiles them into a prioritized tracker spreadsheet.
Alert on criticals
Caddi watches Tenable for critical vulnerabilities and posts alerts to the security channel.
Tenable API questions
Does Tenable have an API?
Yes. Tenable has a REST API, authenticated with API key (access key + secret key in the X-ApiKeys header). The official documentation is at https://developer.tenable.com/.
How do I get access to the Tenable API?
Customers only: API keys are generated per user account in Tenable Vulnerability Management, subject to role and license.
Does the Tenable API have rate limits?
Dynamic per-user requests-per-minute limits based on platform load, and requests over the limit get HTTP 429 with a Retry-After header (no fixed number is published).
Can I connect Tenable to my other tools without writing code against its API?
Yes. With Caddi you show the Tenable task once, the way you'd train a new hire, and Caddi builds it as verified code that runs across Tenable and the other tools the job touches. Where a step has no API, Caddi uses a secure, audited browser session in the same automation.
Do I need a developer to automate Tenable with Caddi?
No. There is no integration code for you to write or maintain. Every automation Caddi builds for Tenable is reviewed before it runs in production, and every run is logged.
Connect Tenable without the build.
Drop your work email and pick a time. We'll show you Caddi running your Tenable workflow end to end.