Tool integration

Qualys WAS Integration Guide

Qualys Web Application Scanning for continuous web app vulnerability detection

Get a Free API Key

Integrate Qualys WAS with Vulnetix. Export scan findings from Qualys Web Application Scanning as JSON via the WAS API or GitHub Actions integration, then upload to Vulnetix.

SaaS platformJSONXMLPDF

Run Qualys WAS in CI

Scan on every push and upload the results to Vulnetix:

- name: Run Qualys WAS scan
  uses: Qualys/github-action-qwas@v1
  with:
    QUALYS_APISERVER: ${{ secrets.QUALYS_APISERVER }}
    QUALYS_USERNAME: ${{ secrets.QUALYS_USERNAME }}
    QUALYS_PASSWORD: ${{ secrets.QUALYS_PASSWORD }}
    APP_ID: ${{ secrets.QUALYS_APP_ID }}
    WAIT_FOR_RESULT: true

- name: Upload report
  run: vulnetix upload --file Qualys_WAS_Scan_Result.json

Centralise Qualys WAS results in Vulnetix

Upload Qualys WAS JSON, XML, PDF output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

Qualys WAS documentation ↗

Wire Qualys WAS into your CI/CD pipeline →