Tenacy x XMCO plugin
leportail by XMCO
XMCO has developed a solution to help you consolidate the tracking of all safety actions within a dedicated portal. leportail offers 3 major functionalities:
- A workflow tool that enables you to process actions to be carried out and track those in the process of being resolved, thanks to a ticket system.
- The integration of all XMCO service offerings: Vulnerability Watch and Cyber-surveillance, Audits and Phishing Campaigns.
- An API to automate the retrieval of information made available to you.
XMCO portal Tenacy connector
This connector with the XMCO portal offers you 3 different modules:
- Audit
- Serenety
- Yuno
Data made available in Tenacy
The modules can be activated one by one, and provide data on :
- Audits carried out by XMCO: actions, new, completed, in progress, late or pending actions, vulnerabilities and resolved vulnerabilities.
- The exposure surface assessed by Serenety: alerts opened in total and recently, alerts closed recently, median duration of opening of all alerts, average and median between opening and closing, alerts by status.
- Technology watch evaluated by Yuno: open tickets, tickets by severity, tickets by status, tickets by type, tickets by vendor (to be configured).
Required information
- XMCO portal URL: default value, configurable if required (https://leportail.xmco.fr/)
- API Key: Enables authentication, the key is attached and uses the rights of the user who's been generating it, so it's up to the user to have sufficient permissions and perimeters.
?Click top right on your initials/avatar > Account Settings > Security > Personal API Key (⚠️ once generated, the key value cannot be redisplayed, it must be regenerated and change wherever it was used)
Then for each module:
- Audit module:
- Severity, to synchronize remediations and consider them important
- Gap register, for synchronizing audit remediations in TENACY. If this value is left empty, no remediation will be synchronized. You're able to select one of the proposed value, even a default one with the name of the module or type your own.
- Perimeter to which the above register is attached.
- Maximum number of gaps to be synchronized (maximum and if left empty: 100).
- Serenety module :
- Content delay, the period in days over which "recent" information must be retrieved. We advise you to match this to the periodicity of your connector to compare consistent data.
- Severity, at which point alerts are synchronized and considered important
- Gap register, for synchronizing audit remediations in TENACY. If this value is left empty, no remediation will be synchronized. You're able to select one of the proposed value, even a default one with the name of the module or type your own.
- Perimeter to which the above register is attached.
- Maximum number of gaps to be synchronized (maximum and if left empty: 100).
- Yuno Module:
- Content delay, the period in days over which "recent" information must be retrieved. We advise you to match this to the periodicity of your connector to compare consistent data.
- Severity, at which point alerts are synchronized and considered important