Nucleus Integration

Connect Furl to Nucleus using API credentials for vulnerability management and security findings.

Description

Nucleus is a vulnerability management platform that provides comprehensive asset discovery, vulnerability assessment, and security findings management across your infrastructure. Furl integrates with Nucleus to import asset inventory and vulnerability findings for comprehensive security risk management.

Configuration Steps

1. Create a Service Account (Recommended)

   • Create a dedicated service account in Nucleus specifically for API usage
   • This provides better security and auditability than using personal credentials
   • Ensure the service account has the necessary permissions for asset and vulnerability data access

2. Generate API Key

   • Log in to your Nucleus dashboard
   • Click on your user profile in the top right corner
   • Navigate to “User Profile” settings
   • Generate a new API key from the API settings section
   • Copy the generated API key and store it securely

3. Identify Your Project and Instance

   • Note the name of the Nucleus project you want to connect to
   • Identify your Nucleus instance/region (e.g., nucleus-us1)
   • These will be used to configure the integration

Required Configuration

Provide the following in Furl:

• API Key - Your Nucleus API key for authentication (used in x-apikey header)
• Project Name - The name of the Nucleus project to connect to (used to retrieve project ID)
• Instance - The Nucleus instance/region to connect to (e.g., nucleus-us1) - optional, defaults to nucleus-us1

Datasource Configuration

Assets

The Assets datasource retrieves comprehensive asset inventory including:

• Asset details and metadata from your specified Nucleus project
• Asset grouping and classification information
• Network and system information for discovered assets

Optional Configuration:

• Asset Group Filter - Filter assets by group (e.g., ‘group1’, ‘group2’)

Findings

The Findings datasource provides vulnerability and security assessment data including:

• Vulnerability findings and security assessments from your specified project
• CVE information and severity classifications
• Asset associations and remediation status

Optional Configuration:

• Has CVEs - If true, only return findings that have associated CVEs. If false, return all findings
• Severity Filter - Filter findings by comma-separated list of severity levels (Critical, High, Medium, Low). Default is Critical,High

Supported Capabilities

Datasources

• Assets → Import comprehensive asset inventory from Nucleus to understand your infrastructure landscape and security posture
• Findings → Import vulnerability findings and security assessments to identify security risks and prioritize remediation efforts

Actions

Currently no actions are supported for this integration.

Troubleshooting

• Ensure your API key has the necessary permissions for asset and vulnerability data access
• Check that your Nucleus account has API access enabled
• Verify your API key is valid and hasn’t expired
• Ensure your project name is correct and accessible with your API key
• Verify your instance/region setting matches your Nucleus deployment
• If using a service account, verify it has the required permissions and hasn’t expired

Important Notes

• Store your API key securely as it provides access to your Nucleus data
• The project name is used to automatically retrieve the project ID for API calls
• Instance/region defaults to nucleus-us1 if not specified
• Severity filtering defaults to Critical and High findings if not specified

Back to Integrations

Documentation Home