Export vulnerabilities at scale with the Tenable Vulnerability Management export API

Steps

1. Authenticate by generating an API key pair (access key and secret key) in Tenable Vulnerability Management under Settings > My Account > API Keys, and include them as X-ApiKeys: accessKey=YOUR_ACCESS_KEY;secretKey=YOUR_SECRET_KEY on every request.
2. Initiate an export job with POST https://cloud.tenable.com/vulns/export, providing a JSON body with filters (severity, state, last_found, plugin_family, etc.) and chunk_size (default 500 findings per chunk).
3. Poll the export status with GET https://cloud.tenable.com/vulns/export/{exportUuid}/status until the status field is FINISHED and the chunks_available_count is populated.
4. Download each chunk with GET https://cloud.tenable.com/vulns/export/{exportUuid}/chunks/{chunkId} and repeat for all chunk IDs returned in the status response.
5. For incremental syncs, record the last export's started_at timestamp and use the last_found date filter on subsequent exports to retrieve only new or updated findings.