This article is for anyone who wants to understand how Tenacy connectors work in general before activating one.
We have developed connectors that let you integrate information from your various tools into a single platform. Tenacy lets you centralize all of your organization's security data in just a few clicks, without juggling between different interfaces or wasting time collecting and organizing data manually.
🔎 The use of connectors depends on your license. Feel free to contact us for more information.
What is a connector
A connector automatically queries a third-party tool (Cyberwatch, Cybereason, JIRA, etc.) to feed security indicators and, depending on the connector, synchronize gaps (security flaws identified by the third-party tool, recorded in a Tenacy register), without manual re-entry.
Each type of connector can offer one or more modules, which can be activated independently of one another. A module is attached to one (and only one) measure: a connector that offers several modules can therefore feed several measures at once.
Mono and multi mapping
Depending on the module, the values retrieved from the third-party tool can be:
Mono mapping: a single global value is fed for all perimeters benefiting from the module.
Multi mapping: each beneficiary perimeter is associated with a lookup key specific to the third-party tool (for example a group or a tag), which allows different values to be fed depending on the perimeter.
⚠️ In multi mapping, if the mapping isn't filled in for a perimeter, the query is run without filtering and returns the global value; missing mappings are flagged as an anomaly in the connector's configuration.
What a connector does to your measures and indicators
When a module linked to a measure is activated, Tenacy checks whether that measure is already implemented on the chosen perimeter:
If not, a new measure is created automatically.
If one or more measures are already implemented, Tenacy offers you the choice to select an existing one or create a new one.
Metrics and indicators fed by a connector are marked auto: they cannot be deleted manually, and continue to be fed even if you detach them from the measure.
Regarding the beneficiaries of a measure fed by a connector:
By default, a newly created measure is private: its only beneficiary is the implementing perimeter.
If you remove a beneficiary from the connector's configuration, the measure is removed from that perimeter's security base.
If you add at least one beneficiary other than the implementer, the measure becomes offered to all the perimeters listed as beneficiaries.
What a connector does to your gaps
When a connector synchronizes gaps, they are associated with the connector's implementing perimeter. This perimeter, together with the gap register chosen during configuration, determines where you'll find the security flaws reported by the third-party tool.
Where to find and activate a connector
You'll find all available connectors in ⚙️ Catalog > Connectors tab.
If you would like more information about the desired connector, click on the help bubble.
Frequently asked questions
What happens if I remove a beneficiary from a measure fed by a connector?
The measure is removed from that perimeter's security base. If you remove all beneficiaries, the measure remains offered but with no beneficiary at all.
Can I manually delete an indicator created by a connector?
No, metrics and indicators marked auto cannot be deleted manually. You can, however, detach them from the measure: the connector will keep feeding them regardless.
What's the difference between a mono mapping and a multi mapping connector?
A mono mapping connector feeds a single global value for all beneficiary perimeters. A multi mapping connector associates each perimeter with a lookup key specific to the third-party tool, allowing different values per perimeter.
Where are the gaps created by a connector stored?
They are always associated with the connector's implementing perimeter, in the gap register chosen during configuration.
Can a connector feed several measures at once?
Yes, if the connector offers several modules: each module is attached to a single measure, but a connector can bundle several modules and therefore be multi-measure.