Unified API for Vulnerability Management

Integrate with any Vulnerability Management provider using same data model.

uuid
issues.summary
desc
severity
taxonomies.cwe
issues.filepath

pluginid
plugin_name
fname
description
cve
plugin_output

value
cat_value
info_severity
valun_cveid
cat_protocol

caregoryid
categoryname
desc
severity_level
cweid
sorucefilepath

id
category
name
description
severity
cve
cwe
state
scan_output
port
protocol
location
cvss_score
first_seen
last_seen

Vulnerability Management Platforms

Veracode

Tenable Nessus

Semgrep

Rapid7 InsightVM

Qualys

Coverity Static

Checkmarx

Black Duck SCA

Smarter Integrations for Faster Remediation

Ingest & Query Vulnerabilities

Fetch detected vulnerabilities for a given asset, project, or repository
Search vulnerabilities by severity, status, CWE, or scanner
Filter by remediation status, CVSS score, exploitability, or asset type
Pull recent scan results or findings since a given timestamp

Analyze & Enrich Context

Get metadata for vulnerabilities, such as CWE, CVE, severity rating
Retrieve affected assets, packages, or components
Fetch remediation recommendations (e.g., patch, configuration fix, upgrade path)
Correlate with external data (if supported by the tool, e.g., threat intel or SBOMs)

Remediation & Ticketing Hooks

Mark a vulnerability as accepted, fixed, or false positive
Create or link a ticket in an external system (e.g., Jira, ServiceNow)
Add comments or audit notes to a vulnerability item
Assign remediation ownership (if supported by the tool)

Unified Vulnerability Management Data Model

Unizo provides a consistent structure for ingesting and managing vulnerabilities, assets, and remediation actions — enabling intelligent prioritization and cross-platform automation.

Auth

Manages authentication to third-party scanners and platforms using secure tokens, credentials, or OAuth flows.

Asset

Defines any scanned entity (e.g., host, container, repo, app) with attributes like IP, hostname, cloud ID, or package ID.

Scan

A snapshot or scheduled process that analyzes one or more assets for security issues. Captures tool-specific scan metadata, timing, status, and references to discovered vulnerabilities

Vulnerability

Captures individual findings with identifiers (CVE, CWEs), severity, risk scores, source scanner, and fix information.