This guide is for Tenacy Global Pilots and Administrators in charge of configuring connectors.
Bitsight is a leader in cyber risk management, transforming how organizations manage exposure, performance, and risk for themselves and third parties.
This connector allows you to synchronize Bitsight Findings as gaps in Tenacy.
Bitsight assigns each Finding a Grade, on a scale from Poor to Good. Any Finding whose Grade is equal to or higher than the selected Minimum Grade is added or updated as a gap in Tenacy, with the following details in its description: First Seen, Last Seen, Finding Severity, Asset Importance, Details, and Comments.
Add and Configure the Connector
To add this connector, go to: Catalog > Connectors > Bitsight > Add a connector
After adding it, you must configure:
Operator perimeter: the perimeter that operates and dictates the rules for external vulnerability scans, to which gaps will be linked by default.
Frequency: how often you plan to import a new CSV report. Match this frequency to how often you actually generate Bitsight reports, whether automatic or manual, so gaps in Tenacy stay up to date.
Once the connector is created, continue with the configuration:
Minimum Grade: from Poor to Good, to filter Findings and only take into account those that matter to you.
Gap Register: Bitsight Findings will be synced as gaps in Tenacy if a register is selected from the list. A dedicated register is offered by default, or you can create your own by entering its name in the field; if it doesn't exist yet, Tenacy creates it automatically when you save the configuration.
Maximum Number of Gaps: only fill this in if you want to limit gap creation to a certain number, up to 100. If left blank, Tenacy syncs all Findings identified by Bitsight as gaps.
💡 This connector doesn't run automatically. It requires you to upload a Bitsight CSV report with the Findings. This report must be saved in CSV UTF-8 or comma-delimited CSV format, and must include at least the following columns:
Vector and Identifier, to map each finding
Remediation Status, to sync the gap's status
Grade, to determine the gap's criticality and apply the minimum grade filter
Assigned To, to identify the linked perimeter and correctly distribute gaps. This column can be left empty. Its value must match an Assigned To value in the perimeter mapping, otherwise the gap will be linked to the operator perimeter
First Seen, Last Seen, Finding Severity, Asset Importance, Assets, Details, and Comments, to enrich the gap's description
Run Your First Test
Once the connector is fully configured, test the integration by running an initial execution:
Go to ⚙️ > Connectors > Click on the Bitsight connector > Run now
💡 Feel free to contact Tenacy support if you have any questions about this.
Frequently asked questions
Does the Bitsight connector run automatically?
No. It never triggers on its own: you must manually download a CSV report from Bitsight, then run the connector's execution in Tenacy.
What happens if the Assigned To column doesn't match any mapped perimeter?
The gap is automatically linked to the operator perimeter defined during the connector's configuration.
Can I limit the number of gaps created per import?
Yes, by setting a maximum number of gaps, up to 100. If you leave this field empty, Tenacy imports all Findings identified by Bitsight.