Qualys

aid: qualys
name: Qualys
description: Qualys is a cloud-based security and compliance platform offering Vulnerability Management Detection and Response
  (VMDR), Policy Compliance, Web Application Scanning, Container Security, EDR, and Cloud Security Posture Management. The
  Qualys API framework exposes XML and JSON REST endpoints across platform pods (qualysapi.qualys.com, qualysapi.qg2.apps.qualys.com,
  etc.) for managing scans, assets, vulnerabilities, reports, and findings. Authentication supports HTTP Basic auth and JWT
  bearer tokens via the Qualys Authentication API.
type: Index
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Security
- Vulnerability Management
- Compliance
- VMDR
- Cloud Security
- Web Application Scanning
url: https://raw.githubusercontent.com/api-evangelist/qualys/refs/heads/main/apis.yml
created: '2026-05-11'
modified: '2026-05-11'
specificationVersion: '0.19'
apis:
- aid: qualys:vmdr-api
  name: Qualys VMDR API
  description: REST/XML API for managing the full Vulnerability Management Detection and Response lifecycle including asset
    inventory, scans, vulnerability findings, prioritization, and reports. Base URL varies per pod (US Platform 1 uses qualysapi.qualys.com);
    authentication is HTTP Basic with Qualys account credentials.
  humanURL: https://docs.qualys.com/en/vm/api/
  baseURL: https://qualysapi.qualys.com
  tags:
  - Vulnerability Management
  - Asset Inventory
  - Scans
  - Reports
  properties:
  - type: Documentation
    url: https://docs.qualys.com/en/vm/api/
  - type: API Quick Reference
    url: https://cdn2.qualys.com/docs/qualys-api-quick-reference.pdf
  - type: User Guide
    url: https://cdn2.qualys.com/docs/qualys-api-vmpc-user-guide.pdf
  - type: Pod URLs
    url: https://www.qualys.com/platform-identification/
  - url: graphql/qualys-graphql.md
    type: GraphQL
- aid: qualys:authentication-api
  name: Qualys Authentication API
  description: Authentication endpoint that issues JSON Web Tokens (JWT) used as Bearer credentials for newer Qualys APIs
    (VMDR OT, CSAM, TotalCloud). Clients post username and password to /auth and pass the returned token in the Authorization
    header on subsequent requests.
  humanURL: https://docs.qualys.com/en/vmdr-ot/api/vmdrot_api/ch01/get_started.htm
  baseURL: https://gateway.qg1.apps.qualys.com
  tags:
  - Authentication
  - JWT
  - Identity
  properties:
  - type: Documentation
    url: https://docs.qualys.com/en/vmdr-ot/api/vmdrot_api/ch01/get_started.htm
common:
- type: GitHubOrganization
  url: https://github.com/qualys
- type: LinkedIn
  url: https://www.linkedin.com/company/qualys
- type: Website
  url: https://www.qualys.com
- type: Documentation
  url: https://docs.qualys.com
- type: API Framework
  url: https://docs.qualys.com/en/vmdr-mobile/api/get_started/qualys_api_framework.htm
- type: Free Trial
  url: https://www.qualys.com/free-trial/
- type: Pricing
  url: https://www.qualys.com/forms/contact-us/
- type: Community
  url: https://success.qualys.com/discussions/s/
- type: Support
  url: https://www.qualys.com/support/
- type: StatusPage
  url: https://status.qualys.com
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com