--- title: Security RX integrations overview source: https://docs.newrelic.com/docs/vulnerability-management/getting-started/integrations/overview --- There are three ways to import common vulnerabilities and exposure (CVE) data: - **APM agents**: automatically detect CVEs in the libraries used by your service. - **Infra agents**: automatically detect CVEs in the OS distribution and any installed packages in the supported Linux distributions used by your infrastructure. - **Third party integrations**: report CVEs detected by third party integrations such as Dependabot or Snyk. - **Our security data API**: report CVE data from unsupported third parties or your own solution directly to New Relic through our security API. ## APM agents [Our APM agents](https://docs.newrelic.com/docs/apm/new-relic-apm/getting-started/introduction-apm/) automatically detect CVEs. - [Go agent](https://one.newrelic.com/marketplace/install-data-source?state=f7bf3dc1-f011-915b-8962-d30d4fa63786) - [Java agent](https://one.newrelic.com/marketplace/install-data-source?state=707a44f9-3a8c-67d6-0cd7-8c142e8c775f) - [Node.js agent](https://one.newrelic.com/marketplace/install-data-source?state=be2e62fa-cc3b-c428-27c4-8d662c9e80a1) - [PHP agent](https://one.newrelic.com/marketplace/install-data-source?state=f21f6cff-9c8d-3bd2-2f2f-3e8faa6e83cf) - [Python agent](https://one.newrelic.com/marketplace/install-data-source?state=43df4a3b-ad8c-353a-58f2-dfd0076119c0) - [Ruby agent](https://one.newrelic.com/marketplace/install-data-source?state=a37c8525-234b-75f0-a637-670b8e1eb455) CVE detection coverage differs between agents: | Agent | Minimum agent version | CVE Coverage | | ------- | ---------------------- | ---------------------------------- | | Java | All supported versions | Jars | | Node.js | All supported versions | Packages | | Ruby | All supported versions | Gems | | Python | 8.0 or higher | Modules | | Go | 3.20 or higher | Modules | | PHP | 10.17 or higher | [Some packages](#php-packages) | | .NET | 10.51.1 or higher | [Nuget packages](#dotnet-packages) | **PHP package support** As of release [v10.17](https://docs.newrelic.com/docs/release-notes/agent-release-notes/php-release-notes/2/#new-relic-php-agent-v101707), New Relic [PHP APM Agent](https://docs.newrelic.com/docs/apm/agents/php-agent/getting-started/introduction-new-relic-php) supports detecting CVEs in the core packages of these [frameworks](https://docs.newrelic.com/docs/apm/agents/php-agent/getting-started/php-agent-compatibility-requirements/#frameworks). If your project uses [Composer](https://getcomposer.org/) to manage dependencies, as of release [v11.2](https://docs.newrelic.com/docs/release-notes/agent-release-notes/php-release-notes/#new-relic-php-agent-v112015), you can configure the New Relic [PHP APM agent](https://docs.newrelic.com/docs/apm/agents/php-agent/getting-started/introduction-new-relic-php) to detect vulnerabilities in all your packages. > #### 💡 TIP > > See the Vulnerability Management settings in [PHP agent configuration](https://docs.newrelic.com/docs/apm/agents/php-agent/configuration/php-agent-configuration/#inivar-vulnerability-management) for detailed information about how to configure the integration in the New Relic PHP APM agent. **.NET package support** Ensure .NET APM agent has been updated to at least version [v10.51.1](https://docs.newrelic.com/docs/release-notes/agent-release-notes/net-release-notes/net-agent-10-51-1/) for best results. .NET CVEs are tracked by NuGet package version. New Relic's agent reports .NET dependencies as DLL files, these DLLs are matched to their source NuGet packages to identify vulnerabilities in your applications. Important limitations: - Incomplete matches may occur when a DLL cannot be definitively linked to a package - Vulnerable packages have higher match rates due to enhanced detection - Custom/private packages cannot be matched if they're not listed on NuGet.org ## Supported OS distributions and package managers Security RX supports following Linux OS distributions: - Debian - Ubuntu - Amazon Linux, CentOS, RHEL & Oracle Linux - SLES Security RX supports following package managers: - RPM - DPKG ## Third party integrations Import data from your other security tools directly into New Relic. We currently support the following tools. If your tool isn’t listed, send your security data through our [security data API](https://docs.newrelic.com/docs/vulnerability-management/integrations/security-data-api). - [AWS Security Hub](https://newrelic.com/instant-observability/security-events) - [Dependabot](https://newrelic.com/instant-observability/github-dependabot) - [Snyk](https://newrelic.com/instant-observability/snyk) - [Trivy](https://docs.newrelic.com/docs/vulnerability-management/integrations/trivy) - [FOSSA](https://docs.newrelic.com/docs/vulnerability-management/integrations/fossa) ## Security data API Send data directly to New Relic through our security data API. Use this when a tool-specific integration doesn't exist or if sending payloads directly to New Relic works best for your workflow. Learn more [here](https://docs.newrelic.com/docs/vulnerability-management/integrations/security-data-api). ## What's next? After configuring your integrations, start monitoring vulnerabilities: [Security RX for Applications](https://docs.newrelic.com/docs/vulnerability-management/applications/overview) Monitor vulnerabilities in your application dependencies [Security RX for Infrastructure](https://docs.newrelic.com/docs/vulnerability-management/infrastructure/overview) Monitor vulnerabilities in your OS packages and distributions [Understand prioritization](https://docs.newrelic.com/docs/vulnerability-management/getting-started/prioritization) Learn how vulnerabilities are ranked by CVSS, EPSS, and ransomware data [Set up alerts](https://docs.newrelic.com/docs/vulnerability-management/advanced/set-up-alerts) Get notified when vulnerabilities are detected