Skip to content

Tenable Showcase Lab is a Python project that simulates vulnerability management concepts with sample data. It demonstrates real-time plugin freshness (Live Results), exposure scoring similar to Lumin, and asset-centric risk views through a Typer CLI and rich tables. The repo includes docs, CI, tests, Docker, and quickstart JSON for hands-on use.

License

Notifications You must be signed in to change notification settings

qexa/Tenable.io-scan

Tenable Showcase Lab

CI Docs License: MIT


📖 Overview

Tenable Showcase Lab is an educational, hands-on project that demonstrates how modern vulnerability management concepts can be simulated and explored in a practical way. Using a small Python CLI and fabricated sample data, the lab highlights three standout Tenable® capabilities:

  1. Live Results (Real-Time Plugin Freshness) – how up-to-date plugin checks reduce risk detection delays.
  2. Lumin-Style Exposure Scoring – simplified scoring that normalizes risk (0–100) based on severity, exploitability, asset criticality, and plugin recency.
  3. Asset-Centric Risk Views – aggregating vulnerabilities at the host level to quickly spotlight your riskiest systems.

Built with Python 3.12, Typer CLI, Rich tables, and MkDocs Material, this repository is designed to help SOC analysts, security students, and engineers practice risk-based vulnerability management workflows in a reproducible lab environment.

⚠️ Disclaimer: This project is not affiliated with or endorsed by Tenable, Inc. It is for educational and portfolio purposes only and uses simulated data.


🚀 Quick Start

1. Setup Environment

# Requires Python 3.12+ and uv
uv venv
uv pip install -e ".[dev]"

About

Tenable Showcase Lab is a Python project that simulates vulnerability management concepts with sample data. It demonstrates real-time plugin freshness (Live Results), exposure scoring similar to Lumin, and asset-centric risk views through a Typer CLI and rich tables. The repo includes docs, CI, tests, Docker, and quickstart JSON for hands-on use.

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published