--- title: "Qualys Vulnerability Management" slug: "qualys-vuln-scanner" updated: 2025-10-15T10:15:38Z published: 2025-10-15T10:15:38Z canonical: "docs.databee.buzz/qualys-vuln-scanner" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Qualys Vulnerability Management Qualys vulnerability management software helps you measure known and unknown risks, prioritize, and communicate risk across vulnerabilities, and patch any device anywhere. For more information, please refer to [Qualys documentation](https://www.qualys.com/documentation/). **Integration Method:** API **Tables**: Vulnerability Finding (2002), Device Inventory Info (5001) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Vulnerable Host | Retrieves list of detections with their asset name | | Assets | Retrieves list of asset details | This integration supports the following versions. | Qualys VM API version | 2.0 | | --- | --- | ## Prerequisites - Access to Qualys dashboard with manager level access - Access to the DataBee Console - Additional feeds required: [Qualys_KB](/user-manual/docs/qualys-vuln-kb) and [NIST_CVE](/user-manual/docs/nist-cve). These feeds provide enrichment data and needs to be onboarded before setting up the Qualys Vulnerability Management feed ## Configuration Overview 1. Create API credentials on the Qualys dashboard with required permissions. 1. Create a user with the required permissions 2. Add the [Qualys VM data feed](/user-manual/docs/qualys-vuln-scanner-new#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameter** | **Qualys Vulnerability Management Parameter** | | --- | --- | | Username | Username | | Password | Password | ## Qualys Configuration 1. Sign in to the **Qualys** Dashboard. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-plm1dm88.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 2. Navigate to the **Users** tab. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-3dlchcjy.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 3. Create a new user using the **Users** > **New** > **User** dropdown on the user page. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-uruwxw0n.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 4. Fill in the necessary data in the **General Information** tab. Then click on **User Role**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-icei8ubo.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 5. In the **User Role** tab, fill in the role details and make sure we have allowed access to both **API** and **GUI**. > [!NOTE] > **Note:** > > Permissions mentioned here are the minimum requirement for the data feed. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-j4zwfp90.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 1. User Role – Manager 2. Allow access in – GUI, API 6. Keep the Locale, Options, and Security settings as they are and click **Save**. The new user will be created with a **Pending Activation status**. Also, an activation link will be sent to the email added in the General Information. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-1sdxabk7.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 7. You will receive an email. Store the **Platform URL** securely as it’ll be needed to configure data source later. Click on **Activate Your Account**.![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-6mfj2vff.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 8. Enter the OTP Code received in email and click on **Submit**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-hu8sikao.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 9. You will get the information below, copy the **password**, and click on the URL. Login with the given **username** and **password**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-h3olnbjr.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 10. When you login with a new username and password for the first time, you will redirect to the verification page, verify your information and click on **Save**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-qic9w8p2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 11. It will redirect to the “Change Password” window. The user can set a new password and login. The user will be in active status. We will use the **username** and **password** to configure the API integration. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-cxtso0pg.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-5956bwe0.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 2. Search for the **Qualys Vulnerability Management** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-eojkqsk5.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-pjlpf3tx.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-f7h2ode9.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) 5. In the configuration page, confirm the following: ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/qualys-vm-sep-2025-image-ddmarnbk.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A52Z&se=2026-10-30T12%3A37%3A52Z&sr=c&sp=r&sig=jJQVF0YWFObhxJB5IPVJWiuGA1QOorssg5DgLfXfNpk%3D) - **Authorization Method**: Basic - **API Base URL:** Replace API Base URL with the URL copied before from email. Refer to this document: [Qualys Platform Identification](https://www.qualys.com/platform-identification/) - **Username**: Paste the **Username** generated earlier in email. - **Password**: Paste the **Password** of the account that was set up earlier. - **Event Types**: Preselected for all the event types that integration pulls. - **Additional Vulnerability Type:** Preselected for all vulnerabilities pulled by the integration. Users can include or exclude these types as required. 6. Click **Submit**. ## Troubleshooting Tips - Ensure that username and password are correct. - Ensure that the user has a **manager** role. - If you are unable to login with the temporary password, make sure you have given UI Permission to the User. #