About

The Cavelo integration brings your clients' Cavelo data into ControlMap. You connect Cavelo once in the MSP portal. ControlMap then syncs your Cavelo organizations, their assets, the vulnerabilities found on those assets, and the CIS benchmark results for each device.

This gives you an up-to-date asset inventory and vulnerability record for each client, without entering it by hand, and ControlMap runs automated compliance checks on the data.

Each Cavelo organization becomes a prospect company in ControlMap. Once a prospect is an active client, its assets, vulnerabilities and compliance checks also appear in the client's own portal under Monitor, as a connection with a Partner badge. The client can see it but can't edit it.

Before you start

You need:

• A Cavelo API key from your Cavelo account.

Connect Cavelo

1. In the MSP portal, select Integrations in the top menu.
2. Select + Integration. If you have no integrations yet, select Create Connection instead. The "Connect your tools and services" page opens.
3. Under Vulnerability Scanners, find the Cavelo card and select Connect.

In this example Cavelo is already connected, so its button reads Connected instead of Connect.

4. On the Setup Connection step, check Cavelo API URL. It is filled in for you with https://api.prod.cavelodata.com.
5. Paste your Cavelo API key into API key.
6. Select Create & Next. ControlMap tests the connection before it saves anything. If Cavelo rejects the key, nothing is saved and the message "Unable to connect to Cavelo. Please verify the API key and permissions." appears under the form.
7. On the Schedule step, choose the Day of the week and the Time of the day. Scans run weekly.
8. Select Save & Scan Now to save the schedule and start a scan straight away, or Save Schedule to save it only. When the "Schedule saved successfully" message appears, select Got It.

The first sync typically takes a few minutes before companies and results start to show up.

What you'll see after connecting

Select Cavelo in your Integrations list to open it. The page header shows the integration's name and whether it is Running or Not Running. Select Run Once to scan on demand. A message says the scan is scheduled to start in the next few minutes, and Force Stop appears while a scan runs.

The page has these tabs:

• Compliance Checks
• Companies
• Assets
• Vulnerabilities
• CIS Benchmarks
• Help
• Connection
• Schedule

Compliance Checks

The tab opens with the Automated scan results tiles (Passed, Failed and Error), followed by the list of compliance checks. Select a tile to filter the list. Each check shows its latest scan result and has an Enable toggle. These are the checks:

• Assets are monitored and inventoried from Cavelo.
• Vulnerabilities are monitored and inventoried from Cavelo.
• One check for each CIS Controls v8.1 safeguard found in your Cavelo benchmark results, titled with the safeguard number and name, for example CIS 3.10 — Encrypt Sensitive Data in Transit. Its result shows how many rules pass, for example 19 of 62 (31%) passing.

After each sync, ControlMap adds checks for new safeguards and retires checks for safeguards that no longer appear in the results.

Checks show No Data until the first scan finishes.

Companies

This tab lists the companies ControlMap found in Cavelo. It shows these columns: Company, Status, Last Update and Identifier. Use Search Company to find one. Each company starts as a prospect. You can activate a prospect, or merge it into an existing client, from the Dashboard. If a company is later removed from Cavelo, it stays in ControlMap and is marked as no longer syncing.

Assets

This tab shows a chart of your asset counts over time, a search box and a table of the devices Cavelo reports. The table has these columns:

• Client Name
• Asset Name
• Identifier
• Region, the device's location, such as a city and province
• Last Updated
• Last Seen
• Additional Information, where Additional Information opens a side panel with the full record Cavelo holds for the device

Vulnerabilities

This tab starts with a Right Now card that shows the total number of vulnerabilities, the Critical, High, Medium and Low counts, and how many companies they span. A trend chart and a table follow. The table has these columns:

• Client Name
• Name
• Severity
• Product
• Description
• Assets

CIS Benchmarks

This tab shows the benchmark results Cavelo reports for each device. It opens with these cards:

• Compliance Check: the overall pass rate, shown as a count and a percentage.
• Passing: safeguards that fully pass.
• Failing: safeguards that need remediation.
• Review Required: safeguards awaiting review.
• Unmapped Rules: benchmark rules that Cavelo has not assigned to a CIS safeguard.

Below the cards, narrow the results with these filters:

• CIS Safeguard: pick a safeguard from the list.
• Search rule / host: search by rule or host name.
• Result: All Results, Pass, Fail, Error, Review Required or Unknown.
• Benchmark: All Benchmarks, or one benchmark.
• Operating System: All OS, or one operating system.

Select Clear filters to reset them. The table shows these columns: Client Name, CIS Safeguard, Benchmark / Rule, Result, Host, Operating System and Scan Time. Select Export CSV to download the rows that match your filters.

Disconnect or change settings

Update the API key or URL

1. Open Cavelo from your Integrations list and select the Connection tab. It shows "Successfully connected to Cavelo." when the connection works.
2. Edit Cavelo API URL or API key. The saved key shows as dots. Leave it as it is to keep the stored key.
3. Select Update Connection. ControlMap tests the connection again before it saves. Select Cancel to leave without saving.

Change the schedule

Open Cavelo, select the Schedule tab, choose a new Day of the week and Time of the day, and select Save Schedule. Select Save & Scan Now to save and scan straight away.

Delete the integration

1. In your Integrations list, select the bin icon on the Cavelo row. The "Delete Cavelo integration?" window opens.
2. If Cavelo already has active client tenants, choose one option: Keep data, delete integration keeps everything ControlMap has already collected, and Delete data and integration also deletes that data, which can't be undone.
3. Type DELETE and select Delete. ControlMap confirms with "Successfully deleted the integration."

If Cavelo has no active client tenants, there is no choice to make, and deleting the integration removes its data.