> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Edgescan

> Connect ThreatAware to Edgescan to monitor vulnerability assessments and security scanning

## Overview

The Edgescan integration enables ThreatAware to collect read-only data from your Edgescan platform, providing visibility into vulnerability assessments, security scanning results, and compliance information.

<Info>
  **Connection Method**: API
  **Setup Time**: 10 minutes
  **Access Required**: Edgescan Administrator account
</Info>

## Data collected

The Edgescan integration provides:

* Vulnerability assessment data
* Security scanning results
* Compliance information
* Asset vulnerability status

## Use cases

<CardGroup cols={2}>
  <Card title="Vulnerability Monitoring" icon="shield-halved">
    Track vulnerabilities discovered across your assets
  </Card>

  <Card title="Security Scanning" icon="clipboard-check">
    Monitor security scanning status and results
  </Card>

  <Card title="Compliance Validation" icon="eye">
    Verify security compliance across your environment
  </Card>

  <Card title="Risk Assessment" icon="file-contract">
    Generate reports on vulnerability and risk status
  </Card>
</CardGroup>

## Setup instructions

<Steps>
  <Step title="Log in to Edgescan Console">
    Access the [Edgescan Console](https://console.edgescan.com) with an account that has administrator privileges.
  </Step>

  <Step title="Generate API Key">
    In the Edgescan console:

    * Navigate to **Settings** > **API Keys**
    * Click **Generate API Key**
    * Specify permissions needed for ThreatAware, typically **Read-only** or **View** access to vulnerability data
    * Copy the **API Key** generated

    <Tip>
      Store this key securely. It will only be displayed once during generation.
    </Tip>
  </Step>

  <Step title="Configure in ThreatAware">
    Complete the integration setup in ThreatAware:

    * Navigate to **Settings** > **Integrations**
    * Search for and select **Edgescan**
    * Enter the required credential:
      * **API Key**: The API key generated in Edgescan
    * Click **Connect** to establish the integration
  </Step>

  <Step title="Verify Connection">
    After connecting, verify the integration is working:

    * Check that the **Integration Status** shows as **Active**
    * Confirm that vulnerability data is appearing in ThreatAware
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="API Key" icon="key">
    **Field Name**: Edgescan API Key
    **Type**: Password (encrypted)
    **Description**: The key generated for API access in Edgescan

    <Tip>
      Store this credential securely in your organisation's password manager. The key is only displayed once during generation.
    </Tip>
  </Accordion>
</AccordionGroup>

## Verification and testing

After setup, verify the integration is working correctly:

1. **Check Integration Status**
   * Navigate to **Settings** > **Integrations** in ThreatAware
   * Confirm the Edgescan integration shows **Active** status
   * Check the last sync timestamp

2. **Verify Data Collection**
   * Wait 5-10 minutes for the initial data sync
   * Check for vulnerability data in ThreatAware
   * Verify security scanning results are being collected

3. **Test Queries**
   * Create a test query to filter vulnerability data from Edgescan
   * Verify the data matches your expectations

## Troubleshooting

<AccordionGroup>
  <Accordion title="Invalid API Key Error" icon="triangle-exclamation">
    **Symptoms**: Integration status shows authentication failure

    **Solutions**:

    * Verify the **API Key** is exactly as displayed in Edgescan (no extra spaces)
    * Ensure the API key has not expired or been revoked
    * Regenerate a new API key in Edgescan if the current one is suspect
    * Confirm your Edgescan account has administrator privileges
  </Accordion>

  <Accordion title="Permission Denied" icon="ban">
    **Symptoms**: Integration connects but no vulnerability data appears

    **Solutions**:

    * Verify the API key has read permissions for vulnerability data
    * Check that the key has access to scanning results and asset information
    * Review the [Edgescan API Documentation](https://docs.edgescan.com) for permission details
    * Ensure your API key has not been disabled or restricted
  </Accordion>

  <Accordion title="Connection Timeout" icon="clock">
    **Symptoms**: Integration fails to connect or times out

    **Solutions**:

    * Verify Edgescan is accessible and online
    * Check firewall rules allow outbound HTTPS (443) to Edgescan
    * Test the Edgescan console URL in a browser to ensure connectivity
    * Contact Edgescan support if their platform is experiencing issues
  </Accordion>

  <Accordion title="No Data After 10 Minutes" icon="database">
    **Symptoms**: Integration shows active but no vulnerability data appears

    **Solutions**:

    * Verify you have assets and scans configured in Edgescan
    * Check that the API key has access to vulnerability and asset data
    * Confirm Edgescan has completed at least one security scan
    * Wait up to 15 minutes for the initial sync to complete
  </Accordion>
</AccordionGroup>

## Additional resources

<CardGroup cols={2}>
  <Card title="Edgescan API Documentation" icon="book" href="https://docs.edgescan.com">
    Official Edgescan API documentation for detailed permissions and configuration
  </Card>

  <Card title="ThreatAware Support" icon="life-ring" href="mailto:help@threataware.com">
    Contact ThreatAware support for integration assistance
  </Card>
</CardGroup>

## Best practices

<Tip>
  **Credential Management**

  * Store your API key securely in your organisation's password manager
  * Rotate API keys annually or per your security policy
  * Monitor integration logs in ThreatAware for authentication failures
  * Keep track of key generation dates and set renewal reminders
</Tip>

<Tip>
  **Security Considerations**

  * API keys provide access to vulnerability data
  * Only share API keys with authorised personnel
  * Review your Edgescan API activity logs periodically
  * Regenerate API keys if they are exposed or compromised
</Tip>