ESIA Connectors
ESIA connectors let Governy automatically bring in security assessment data from external security and compliance tools. Instead of entering scores by hand, a connector can pull live data from a security scanner or monitoring tool and map it to the right requirements in your audit — ideal for organisations that already have automated security tooling and want to reuse its output as evidence of compliance.
What a connector does
A connector is a configured link between Governy and an external security system. Once set up, it signs in to that system securely, retrieves the relevant security signals and scores, matches them to the requirements in an audit, and updates the assessment results automatically.
Managing connectors
Each workspace shows the connectors configured for it, with their name, the external system they connect to, their status, when they last ran and which audit they feed.
Creating one is a matter of giving it a name, the external system’s address and sign-in credentials, an optional network setting and whether it’s active.
Before relying on it, use Test connection to confirm the credentials and access are working.
Editing lets you update the name, address, credentials and active status at any time.
Bringing in data
To import data, choose Sync, pick the target audit, and run it. The connector signs in to the external system, retrieves its security signals, matches each one to a requirement, and updates the results. When it finishes, you’ll see how many assessments were updated, anything that couldn’t be matched, and any errors. For longer runs, a live progress view keeps you updated as each signal is processed.
How signals become scores
A connector translates raw signals from the external system — things like vulnerability counts or policy pass/fail states — onto your framework’s scale. Negative signals lower the compliance score, and the final result is written to the matching requirement. The way signals map to requirements is configured centrally and shared across connectors of the same type.
Removing a connector
Deleting a connector removes its configuration but leaves any data it already imported in place — previous results stay in the audit.
Who can do what
| Action | Admin | Everyone else |
|---|---|---|
| View connectors | ✓ | ✗ |
| Create / edit | ✓ | ✗ |
| Test connection | ✓ | ✗ |
| Run a sync | ✓ | ✗ |
| Delete | ✓ | ✗ |
Good to know
- ESIA connectors are a Pro feature — availability depends on your plan.
- Imported data can always be adjusted by an analyst or manager on any individual assessment — manual edits take precedence, and a sync never locks assessments.