Web App Scanning: Export Findings

Tenable is pleased to announce the availability of the new findings export API for Tenable Web App Scanning (WAS). New endpoints have been added to the WAS API to enable customers to bulk export their WAS findings.

The new endpoints are described in the following table:

Endpoint	Name	Description
POST /was/v1/export/vulns	Export findings	Exports Tenable Web App Scanning findings that match the request criteria.
GET /was/v1/export/vulns/{export_uuid}/status	Get findings export status	Returns the status of a Tenable Web App findings export request.
GET /was/v1/export/vulns/status	List findings export jobs	Retrieves a list of WAS findings export jobs. This list includes the 1,000 most recent export jobs regardless of status. However, this list includes completed jobs only if the job completed in the previous three days.
GET /was/v1/export/vulns/{export_uuid}/chunks/{chunk_id}	Download findings export chunk	Downloads exported WAS findings as a JSON file. The response content type is `application/octet-stream`. Chunks are available for download for up to 24 hours after they have been created. Tenable Web App Scanning returns a 404 message for expired chunks. Export chunks do not include an attribute if that attribute is empty in the vulnerability record.
POST /was/v1/export/vulns/{export_uuid}/cancel	Cancel findings export	Cancels the specified WAS finding export job. If you cancel an export job, Tenable Web App Scanning finishes any chunk that is currently processing, terminates the processing of any unprocessed chunks, and updates the job status to `CANCELLED`. If a cancelled job includes completed chunks, you can download those chunks for three days after cancellation.