topic Re: Dynatrace Application Security Integrations in Automations

Dynatrace Application Security Integrations

Ahmed_Khaled — Wed, 05 Apr 2023 07:11:44 GMT

With the introduction of Application security, I wanted to know if it is possible to have it integrated with other scanning tools that any client would have like Tenable or Nessus for example. if yes how is it done and if it is not possible at the moment is it something that is being developed?

Re: Dynatrace Application Security Integrations

michiel_otten — Tue, 04 Apr 2023 19:25:09 GMT

Dynatrace AppSec uses the OneAgent to scan potential vulnerable code and components, matching it against the Snyk database.

Security vulnerabilities are exportable via the API and can be pushed to every tool if you write a simple script and have API access there f.e.

From other tools you can use the dynatrace api to import metrics from there and create problems within Dynatrace. I can't answer the question if Dynatrace will support other tooling but I think this won't be something they'll work on probably.

Re: Dynatrace Application Security Integrations

Esam_Eid — Mon, 19 Feb 2024 14:17:22 GMT

Hi Michiel,

We have integrated AppSec notifications using webhook with Splunk SIEM. The custom payload fields allows only certain fields but our customer is looking for more fields like

CVE (for known vulnerability) or Reference ID (for misconfigurations)
CVE Severity
CVE ID
Host Name
IP
Pod / Node
Container

any suggestion?

Re: Dynatrace Application Security Integrations

michiel_otten — Mon, 11 Mar 2024 18:28:52 GMT

Hi there,

The custom webhook will just do some notiication indeed. If you want to integrate further you could try using the API. F.e.:

Vulnerabilities API - GET vulnerabilities - Dynatrace Docs

Using a workflow you can set up your own integration to SIEM where you finetune the notification.