How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Tenable Exports API

With the Exports API, you can manage asynchronous finding exports. Use these endpoints to initiate export jobs, monitor status, and download results in chunks for integration with external workflow management systems.

Tenable Exports API is one of 107 APIs that Tenable publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Export. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 5 operations across 5 paths, and defines 18 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against a single base URL, https://www.tenable.com/downloads/api/v2.

5 operations 5 paths 18 schemas 3 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://cloud.tenable.com
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Tenable Exports API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer). By default, every request must be authenticated.

  • Bearer — Example: Bearer {{token}}

Paths & Operations 5

Across 5 paths, the API surfaces 5 operations — 3 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Exports 5

With the Exports API, you can manage asynchronous finding exports. Use these endpoints to initiate export jobs, monitor status, and download results in chunks for integration with…

POST
/was/v1/export/vulns
Export findings
was-export-findings body → 200400401403409429500
GET
/was/v1/export/vulns/{export_uuid}/status
Get findings export status
was-export-findings-status 1 param → 200400401403404429500
GET
/was/v1/export/vulns/status
List findings export jobs
was-export-findings-jobs-list → 200400401403429500
GET
/was/v1/export/vulns/{export_uuid}/chunks/{chunk_id}
Download findings export chunk
was-export-findings-download-chunk 2 params → 200400401403404429500
POST
/was/v1/export/vulns/{export_uuid}/cancel
Cancel findings export
was-export-findings-cancel 1 param → 200400401403404429500

Schemas 18

The contract defines 18 schemas that model the data the API accepts and returns. The most detailed are was_plugin (72 properties), response-was-findings-chunk (23 properties), response-findings-export-status (13 properties), cvss4_vector (12 properties). Each schema is shown below with its type and property counts.

epss_filter
object
Filters vulnerabilities by their Exploit Prediction Scoring System (EPSS) score, expressed as a percentage from 0 to 100. You can combine properties to define…
6 properties
cvss_temporal_vector
object
CVSSv2 temporal metrics for the vulnerability.
4 properties
cvss4_threat_vector
object
An object representing the CVSS v4.0 Threat metrics for the vulnerability. These metrics provide context on current, observed threat activity in the wild, such…
3 properties
cvss3_temporal_vector
object
CVSSv3 temporal metrics for the vulnerability.
4 properties
cvss4_vector
object
An object representing the full set of CVSS v4.0 base metrics for the vulnerability. These metrics define the intrinsic characteristics of the vulnerability, i…
12 properties
response-findings-export-status
object
Information about the specified findings export job.
13 properties
vpr_v2_filter
object
Filters vulnerabilities based on their Vulnerability Priority Rating (VPR) version 2 score. This enhanced version is labeled VPR (Beta) in the user interface.…
6 properties
ErrorResponse
object
Tenable Web App Scanning error response.
1 property 1 required
was_plugin
object
Information about the plugin that detected the finding.
72 properties
cvss3_vector
object
Additional CVSSv3 metrics for the vulnerability.
7 properties
response-findings-export-jobs
object
10 properties
vpr_filter
object
Filters vulnerabilities based on their Vulnerability Priority Rating (VPR) version 1 score. You can define score ranges using properties such as gte (greater t…
6 properties
was-scan-information
object
Information about the latest scan that detected the vulnerability.
4 properties
response-was-findings-chunk
object
A chunk of WAS findings.
23 properties
cvss_vector
object
Additional CVSSv2 metrics for the vulnerability.
7 properties
cvss4_filter
object
Filters vulnerabilities based on their CVSS version 4 (CVSSv4) base score. You can specify score ranges using the provided comparison properties. For example,…
6 properties
response-was-export-chunk-asset
object
Information about the asset where the scan detected the vulnerability.
4 properties
exploit_framework
object
Detail of exploit framework
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

tenable-exports-api-openapi.yml Raw ↑

Other APIs Tenable publishes across the network.

Tenable About API
Tenable Access Control (API) API
Tenable Access Control (Groups) API
Tenable Access Control (Permissions) API
Tenable Access Control (Roles) API
Tenable Access Control (Users) API
Tenable Access Groups v1 API
Tenable Access Groups v2 API
Tenable Account Groups API
Tenable Accounts API
Tenable Activity Log API
Tenable AD object API
Where this information came from

This is an independent, third-party profile of Tenable Exports API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.