---
title: "Kenna Security"
description: "Import Cobalt Findings into Kenna Security"
canonical_url: "https://docs.cobalt.io/articles/kenna-security-p4DLbFArrS"
md_url: "https://docs.cobalt.io/articles/kenna-security-p4DLbFArrS.md"
---
# Kenna Security

## **Import Cobalt Findings into Kenna Security**

Set up an integration with Kenna Security.


:::info
Configure the integration to import Cobalt pentest findings into the Kenna Security platform.

You can also refer to the Kenna Security [documentation](https://github.com/KennaSecurity/toolkit/tree/main/tasks/connectors/cobaltio#readme).

:::

## **Integration Overview**

[Kenna Security](https://www.cisco.com/c/en/us/products/security/kenna-is-part-of-cisco.html) is a risk and vulnerability intelligence platform.

You can retrieve [findings](https://docs.cobalt.io/en-us/articles/findings-6prkG67iav) data from Cobalt using the API and import it into Kenna Security. Then you can measure risk associated with vulnerabilities and prioritize remediation efforts on the Kenna Security platform.

## **What You Need**

To configure the integration, you need the following:

* **Cobalt API token**. Learn [how to create an API token](https://docs.cobalt.io/en-us/articles/create-a-personal-cobalt-api-token-LT9Nl8EAVR).
* **Cobalt organization token**. Learn [how to retrieve an organization token](https://docs.cobalt.io/en-us/articles/organizations-nSBOGGiia7) using the Cobalt API v1.
  * Make sure that you use the [Cobalt API v1](https://cobalt-public-api.netlify.app/v1/) and not v2. This integration doesn’t support organization tokens from the API v2.
* **Kenna Security API key**. Learn [how to create an API key](https://help.kennasecurity.com/hc/en-us/articles/360029111331-API-Key-Generation-and-Permissions?blk=true).
* **Kenna Security connector ID**. Create a Kenna Security Data Importer connector, and copy the connector ID as described in [step 1](https://docs.cobalt.io/articles/kenna-security-p4DLbFArrS#h-step-1-create-a-kenna-security-data-importer-connector).

## **Step 1: Create a Kenna Security Data Importer Connector**

We recommend creating a dedicated connector for importing Cobalt findings in Kenna Security, even if you already have other connectors configured.


1. In Kenna Security, select **Connectors**.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=25cb44e7-175b-4c2e-a84d-0b56d7a108f6)


2. Select **Add Connector**.       ![](https://docs.cobalt.io/api/attachments.redirect?id=5952fc46-6eea-4860-8df0-57edcfa43a59)
3. Search for and select the **Kenna Data Importer** connector.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=b5f385d0-0660-4a00-9b2c-503f2d54b6ea)


4. On the configuration page, enter a name for your connector, such as *Kenna Data Importer - Cobalt.io*. Select **Save**.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=170126e1-c9de-4660-a30f-79661467a989)


5. Select the connector you created.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=58e6ae38-f8c5-4efe-b0a9-0256d1873d1c)


6. Copy the connector ID. You will need it in [step 2](https://docs.cobalt.io/en-us/articles/kenna-security-p4DLbFArrS#h-step-2-get-the-kenna-security-toolkit-image).

 ![](https://docs.cobalt.io/api/attachments.redirect?id=c28610df-cb9a-4408-86af-bbe661d0fa07)

## **Step 2: Get the Kenna Security Toolkit Image**

The Kenna Security Toolkit is wrapped in a container image. You can get it in two ways:

* [Pull the image from Docker Hub](https://docs.cobalt.io/en-us/articles/kenna-security-p4DLbFArrS#h-from-docker-hub)
* [Build the image from the source](https://docs.cobalt.io/en-us/articles/kenna-security-p4DLbFArrS#h-from-the-source)

## **From Docker Hub**

Pull the toolkit image from Docker Hub using this request:

```javascript
docker pull kennasecurity/toolkit
```

When ready, go to [step 3](https://docs.cobalt.io/en-us/articles/kenna-security-p4DLbFArrS#h-step-3-run-the-cobalt-task).

## **From the Source**


1. Clone the Kenna Toolkit repository.

```javascript
git clone git@github.com:KennaSecurity/toolkit.git
```


2. Build the Kenna Security Toolkit image from the source. If you’ve already done this in the past, you may have to do it again because the Cobalt task is a relatively new addition.

```javascript
docker build . -t toolkit:latest
```

## **Step 3: Run the Cobalt Task**


1. Prepare the following variables required to run the Cobalt task. See [how to get these values](https://docs.cobalt.io/en-us/articles/kenna-security-p4DLbFArrS#h-what-you-need).
   * `COBALT_API_TOKEN`: Cobalt API token
     * `COBALT_ORG_TOKEN`: Cobalt organization token
     * `KENNA_API_KEY`: Kenna Security API key
     * `KENNA_CONNECTOR_ID`: ID of the Kenna Security Data Importer connector
2. Replace variables with your values, and run this task:

```javascript
export COBALT_API_TOKEN=xxx

export COBALT_ORG_TOKEN=xxx

export KENNA_API_KEY=xxx

export KENNA_CONNECTOR_ID=xxx
```


3. Run the toolkit with the `cobaltio`task selected. This command imports all findings from the configured organization in Cobalt into Kenna Security.
   * (Recommended) By default, the AppSec module is used.
   * If you want to use the VM module instead, add `kenna_appsec_module=false `to the command below.

```javascript
docker run -it --rm toolkit:latest \

    task=cobaltio \

    cobalt_api_token=$COBALT_API_TOKEN \

    cobalt_org_token=$COBALT_ORG_TOKEN \

    kenna_api_key=$KENNA_API_KEY \

    kenna_connector_id=$KENNA_CONNECTOR_ID
```

## **Step 4: View Imported Findings**

You can view findings imported from Cobalt in one of these modules, depending on which one you’re using:

* [AppSec Module](https://docs.cobalt.io/integrations/kenna-security/#appsec-module)
* [VM Module](https://docs.cobalt.io/en-us/articles/kenna-security-p4DLbFArrS#h-vm-module)

## **AppSec Module**

In Kenna Security, navigate to **AppSec** > **Explore**.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=2da6e2f4-e223-46fa-972d-4cce42423ff0)

You should see findings imported from Cobalt. If the page contains findings from other sources, you can apply a filter for the Cobalt connector.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=90d8f8e2-43eb-47df-bdf1-c17fb5a849e9)

## **VM Module**

In Kenna Security, navigate to **VM** > **Explore**.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=4e8eba5f-d5d6-4d51-bca6-d5c150304d01)

You should see findings imported from Cobalt. If the page contains vulnerabilities from other sources, use search to find newly added vulnerabilities.

 ![](https://docs.cobalt.io/api/attachments.redirect?id=4d32122d-b760-4d2d-9424-e15c0156836b)