# Import Vulnerabilities

Import vulnerability reports from external scanning tools into WatchDog Security. This allows you to centralize findings from tools such as Burp Suite, Nessus, and ZAP.

<div style="
  background: rgba(128,128,128,0.08);
  border: 2px solid rgba(128,128,128,0.25);
  border-radius: 10px;
  padding: 20px 20px 0px 20px;
">
  <div style="font-weight:700; margin-bottom:20px;">Who can use this feature?</div>

  <table style="border-collapse:collapse;">
    <tr>
      <td style="vertical-align:top; padding:0 8px 10px 0;">
        <Icon icon="material-filled-person" color="#d760f9"/>
      </td>
      <td style="vertical-align:top; padding:0 0 10px 0;">
        All <span style="color:#d760f9; font-weight:600;">Account Owners</span> and <span style="color:#d760f9; font-weight:600;">Security Admins</span>
      </td>
    </tr>
    <tr>
      <td style="vertical-align:top; padding:0 8px 0 0;">
        <Icon icon="material-filled-flag" color="#d760f9"/>
      </td>
      <td style="vertical-align:top; padding:0;">
        Available on the <span style="color:#d760f9; font-weight:600;">Free</span>, <span style="color:#d760f9; font-weight:600;">Core</span> and <span style="color:#d760f9; font-weight:600;">Business</span> plans
      </td>
    </tr>
  </table>
</div>

## Import Vulnerability Report

<Steps>
<Step title="Sign in to WatchDog Security">
  Sign in to the [**WatchDog Security Platform**](app.watchdogsecurity.io).
</Step>

<Step title="Open Vulnerabilities Page">
  Navigate to the **Vulnerabilities** page from the sidebar.
</Step>

<Step title="Start Import">
  Click **Add Vulnerability** and select **Import**.
</Step>

<Step title="Select Report Type">
  Choose the report type such as **Burp Suite**, **Nessus**, or **ZAP**.
</Step>

<Step title="Upload Report File">
  Drag and drop or upload the vulnerability report file in the supported format.
</Step>

<Step title="Import Vulnerabilities">
  Click **Import** to process and create vulnerabilities.
</Step>
</Steps>

## What Happens Next

<TipInfo>The uploaded report is parsed and converted into individual vulnerabilities.</TipInfo>
<TipInfo>Each vulnerability is assigned a severity based on the report data.</TipInfo>
<TipInfo>Imported findings appear in the Open Vulnerabilities table.</TipInfo>

## Troubleshooting

<AccordionGroup>

<Accordion title="Import File Not Accepted" defaultOpen>
If the file cannot be uploaded:

- Ensure the file format matches supported types (**.xml** for supported tools)
- Verify the file is exported correctly from the source tool
- Check file size limits

Invalid formats will be rejected during upload
</Accordion>

<Accordion title="Import Fails Or No Data">
If the import completes but no vulnerabilities appear:

- Verify the report contains valid findings
- Ensure the correct **report type** was selected
- Check for parsing errors in malformed files

Some reports may not include exploitable findings
</Accordion>

<Accordion title="Incorrect Severity Mapping">
If severity appears incorrect:

- Confirm severity is defined in the source report
- Ensure the report follows standard schema
- Review if manual severity override is required after import

Severity mapping depends on source tool structure
</Accordion>

</AccordionGroup>