Qualys Web Application Scanning

On this page

Qualys Web Application Scanning is a Security input connector. Connect to your Qualys Web Application Scanning API to start collecting vulnerability data. Create a Qualys service user before connecting.

IP Allowlists

You might need to add the Monad IP range of 34.210.32.104/32 to your Qualys Web Application Scanning allowlist, so Monad can connect to it.

Set up a Qualys service account

Monad does not currently support using Qualys SAML SSO for connectors. To connect to Monad, create a service user. If you don’t have access to do this, contact your Qualys administrator.

  1. Go to the Qualys Platform Identification page, and copy or write down your Platform name and API URL.
  2. Log in to Qualys and go to Web Application Scanning, then click Users > User, then New > User.
  3. Create a Monad service account that is a non-Manager user, and grant it API access.
  4. Select all the Qualys modules and permissions you want to connect to Monad.
  5. Save the username and password. You’ll need them when you set up the Monad connector.

API URL example

Login redirects to https://qualysguard.qg4.apps.qualys.com, so looking in Qualys Platform Identification (mentioned in point 1) platform is US4 and API URL is https://qualysapi.qg4.apps.qualys.com.

Set up a Qualys Web Application Scanning connector in Monad

  1. In the Monad UI, click Add connector, and choose Qualys Web Application Scanning.
  2. Optionally, change the default name for the connector. This name serves as a label for the connector in the Monad app, and you can change it later.
  3. When prompted, enter the API URL.
  4. Enter the username and password for the service user.
  5. (Optional) - set your connector schedule
  6. Click Connect.

That’s it! Monad tests the connection to Qualys, and if successful, begins syncing data from Qualys into your Monad account.

This page was last modified: 27 Oct 2023