Qualys WAS
Qualys Web Application Scanning (WAS) is a Dynamic Application Security Testing (DAST) solution that crawls and tests live web applications and APIs for security vulnerabilities such as SQL injection, cross-site scripting (XSS), server-side request forgery (SSRF), and authentication weaknesses.
Connecting Qualys WAS to OX imports DAST findings from Qualys and enriches them with additional context from across the OX platform.
Imported findings include the vulnerability details and remediation guidance provided by Qualys. OX augments this information with additional security context and investigation capabilities, helping teams understand the impact and priority of each finding.
When investigating a Qualys WAS finding in OX, you can view:
Vulnerability descriptions imported from Qualys
Remediation recommendations imported from Qualys
CVE and CWE information, when available
OWASP classifications
A link to the original finding in Qualys
The affected URLs associated with the finding
HTTP request details
HTTP response details
Note
Qualys WAS uses the same credentials that you use to sign in to the Qualys platform. No API token is required.
Connect OX to Qualys WAS
Go to Settings > Connectors.
Select Qualys WAS.
Enter the following information:
Qualys Host URL
The URL of your Qualys platform instance.
User Name
Your Qualys username.
Password
Your Qualys password.
Select Verify Connectivity.
Select Connect.
Last updated