Analyze
Vulnerability Analysis
Upload a Nessus, Qualys, OpenVAS/Greenbone or Wazuh scan export as CSV, Excel or ODS - column headers are detected automatically - and get findings consolidated, enriched with CISA KEV and FIRST EPSS, and prioritized for remediation.
What happens to your file
It is parsed on upload and the original bytes are discarded — only the normalized findings are kept, in this server process's memory. Nothing is written to a file, a temporary directory or a database, because the container's filesystem is read-only. They are released 30 minutes after you last touch the analysis, when you clear it, or when the service restarts — whichever comes first.
The link is the key. Once your analysis is running, its address looks like ?s=…, and that identifier is the only thing protecting it. There is no account and no password. Anyone who has the link can open the analysis and download every export from it, for as long as the session lives. Treat the URL the way you would treat the file itself, and use Clear uploaded data now when you are finished rather than waiting for it to expire.
Nothing from the upload is sent anywhere else. Asset names, hostnames, IP addresses and the file itself never leave this container. CVE identifiers are matched against CISA KEV and FIRST EPSS data already downloaded here, so those lookups make no outbound request at all.
