---
title: "Balbix Flexible Connector Guide"
slug: "balbix"
updated: 2026-07-23T06:38:55Z
published: 2026-07-23T06:38:55Z
canonical: "docs.safe.security/balbix"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safe.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Balbix Flexible Connector Guide

The Balbix Flexible Connector (Flex Connector) is a powerful generic connector with the ability to ingest data from nearly any source, enabling new integrations within hours including proprietary third party tools and legacy data sources. The connector can be used to ingest a wide range of information, including infrastructure assets, business applications (such as custom apps, web apps), vulnerabilities (both infrastructure and apps), configuration control assessments, and business/operational metadata. Leveraging the extensive Balbix data model, the Balbix Flexible Connector can be easily configured to ingest data in a CSV snapshot format, map to appropriate Balbix data fields, and set up the required operational frequency.

## Integration summary

This table provides a summary of the Balbix Flexible connector integration.

| **Integration Type** | **Fetch**: An inbound CSV ingestion to fetch assets, applications, vulnerabilities (infrastructure & apps), misconfigurations, threats, controls, and business criticality. |
| --- | --- |
| **Types of Data Fetched** | Infrastructure host assets including servers, virtual machines, desktops, laptops, infrastructure, smart phones, OT/IoT devices and other assets accessible on the network (e.g., printers, switches, routers). Business applications including custom and web applications. |
| **Types of Data Fetched** | **Infrastructure Assets** Asset names (NetBIOS, DNS, other names), hardware information (manufacturer, serial number, etc.), processor information, open port information, location information, interface information (MAC address, IP address), OS information​, BIOS information, tags (both flat and hierarchical tags), software information, open ports, system status (such as reboot pending), vulnerabilities (such as CVEs and misconfigurations), timestamps (such as last observed), and control assessment findings. **Business Applications** Application Name, URL, ID, owner, vulnerabilities (e.g., CVEs, misconfigurations), configuration compliance, relevant timestamps such as first observed, last observed, and tags. |

## Create and configure the connector

Follow these steps to create and configure the Balbix Flexible connector.

[Embedded content](https://scribehow.com/embed/Balbix_Flex_Connector_Guide__0BuuT2m5Rzuqd9YFUPBvFg?as=scrollable)

## Field Mapping

**Cortex XSIAM**

| **Balbix Field** | **Imported Field** |
| --- | --- |
| host_name | Endpoint Name |
| os_name | Operating System |
| ip_address | IP Address |
| device_owner | User |

**Microsoft Defender**

| **Balbix Field** | **Imported Field** |
| --- | --- |
| host_name | Device Name |
| os_version | OS Version |
| ip_address | Device IPs |
| mac_address | Device MACs |

**Lansweeper**

| **Balbix Field** | **Imported Field** |
| --- | --- |
| os_name | OS |
| ip_address | IP Address |
| mac_address | MAC Address |
| host_name | FQDN |

**Netskope**

| **Balbix Field** | **Imported Field** |
| --- | --- |
| host_name | Hostname |
| user_email | User |

**Orca Alerts**

| **Balbix Field** | **Imported Field** |
| --- | --- |
| host_name | Inventory.Name |
| source_first_observed_at | CreatedAt |

**Qualys App Vulns**

| **Balbix Field** | **Imported Field** |
| --- | --- |
| app_vuln_details | QID |
| application_url | IP/URL |
| app_vuln_name | Vulnerability |
| app_vuln_details | Type of Vulnerability |
| app_vuln_state | Vulnerability Status |
| app_vuln_severity | Severity |
| app_page_path | Host |
| app_vuln_description | Description |

**Qualys VMDR**

| **Balbix Field** | **Imported Field** |
| --- | --- |
| custom_vuln_id | CVE |
| custom_vuln_description | CVE Description |
| custom_vuln_severity | Severity |
| host_name | Asset Name |