Skip to main content

​
Overview

The Edgescan integration enables ThreatAware to collect read-only data from your Edgescan platform, providing visibility into vulnerability assessments, security scanning results, and compliance information.
Connection Method: API Setup Time: 10 minutes Access Required: Edgescan Administrator account

​
Data collected

The Edgescan integration provides:
  • Vulnerability assessment data
  • Security scanning results
  • Compliance information
  • Asset vulnerability status

​
Use cases

Vulnerability Monitoring

Track vulnerabilities discovered across your assets

Security Scanning

Monitor security scanning status and results

Compliance Validation

Verify security compliance across your environment

Risk Assessment

Generate reports on vulnerability and risk status

​
Setup instructions

1

Log in to Edgescan Console

Access the Edgescan Console with an account that has administrator privileges.
2

Generate API Key

In the Edgescan console:
  • Navigate to Settings > API Keys
  • Click Generate API Key
  • Specify permissions needed for ThreatAware, typically Read-only or View access to vulnerability data
  • Copy the API Key generated
Store this key securely. It will only be displayed once during generation.
3

Configure in ThreatAware

Complete the integration setup in ThreatAware:
  • Navigate to Settings > Integrations
  • Search for and select Edgescan
  • Enter the required credential:
    • API Key: The API key generated in Edgescan
  • Click Connect to establish the integration
4

Verify Connection

After connecting, verify the integration is working:
  • Check that the Integration Status shows as Active
  • Confirm that vulnerability data is appearing in ThreatAware

​
Required credentials

Field Name: Edgescan API Key Type: Password (encrypted) Description: The key generated for API access in Edgescan
Store this credential securely in your organisation’s password manager. The key is only displayed once during generation.

​
Verification and testing

After setup, verify the integration is working correctly:
  1. Check Integration Status
    • Navigate to Settings > Integrations in ThreatAware
    • Confirm the Edgescan integration shows Active status
    • Check the last sync timestamp
  2. Verify Data Collection
    • Wait 5-10 minutes for the initial data sync
    • Check for vulnerability data in ThreatAware
    • Verify security scanning results are being collected
  3. Test Queries
    • Create a test query to filter vulnerability data from Edgescan
    • Verify the data matches your expectations

​
Troubleshooting

Symptoms: Integration status shows authentication failureSolutions:
  • Verify the API Key is exactly as displayed in Edgescan (no extra spaces)
  • Ensure the API key has not expired or been revoked
  • Regenerate a new API key in Edgescan if the current one is suspect
  • Confirm your Edgescan account has administrator privileges
Symptoms: Integration connects but no vulnerability data appearsSolutions:
  • Verify the API key has read permissions for vulnerability data
  • Check that the key has access to scanning results and asset information
  • Review the Edgescan API Documentation for permission details
  • Ensure your API key has not been disabled or restricted
Symptoms: Integration fails to connect or times outSolutions:
  • Verify Edgescan is accessible and online
  • Check firewall rules allow outbound HTTPS (443) to Edgescan
  • Test the Edgescan console URL in a browser to ensure connectivity
  • Contact Edgescan support if their platform is experiencing issues
Symptoms: Integration shows active but no vulnerability data appearsSolutions:
  • Verify you have assets and scans configured in Edgescan
  • Check that the API key has access to vulnerability and asset data
  • Confirm Edgescan has completed at least one security scan
  • Wait up to 15 minutes for the initial sync to complete

​
Additional resources

Edgescan API Documentation

Official Edgescan API documentation for detailed permissions and configuration

ThreatAware Support

Contact ThreatAware support for integration assistance

​
Best practices

Credential Management
  • Store your API key securely in your organisation’s password manager
  • Rotate API keys annually or per your security policy
  • Monitor integration logs in ThreatAware for authentication failures
  • Keep track of key generation dates and set renewal reminders
Security Considerations
  • API keys provide access to vulnerability data
  • Only share API keys with authorised personnel
  • Review your Edgescan API activity logs periodically
  • Regenerate API keys if they are exposed or compromised