Qualys

Qualys is a cloud-based security and compliance platform offering Vulnerability Management Detection and Response (VMDR), Policy Compliance, Web Application Scanning, Container Security, EDR, and Cloud Security Posture Management. The Qualys API framework exposes XML and JSON REST endpoints across platform pods (qualysapi.qualys.com, qualysapi.qg2.apps.qualys.com, etc.) for managing scans, assets, vulnerabilities, reports, and findings. Authentication supports HTTP Basic auth and JWT bearer tokens via the Qualys Authentication API.

Qualys publishes 2 APIs on the APIs.io network. Tagged areas include Security, Vulnerability Management, Compliance, VMDR, and Cloud Security.

Qualys’ developer surface includes documentation, pricing, support, engineering blog, and 8 more developer resources.

🌐 Visit website 📡 Source on GitHub

25.5/100 emerging ▲ 8.4 Agent 16/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6

2 APIs

SecurityVulnerability ManagementComplianceVMDRCloud SecurityWeb Application Scanning

Kin Score

Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6

Composite quality — 25.5/100 · emerging

Contract Quality 10.8 / 25

Developer Ergonomics 3.0 / 20

Commercial Clarity 2.1 / 20

Operational Transparency 2.7 / 13

Governance 0.0 / 12

Discoverability 6.9 / 10

Agent readiness — 16/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 0 / 10

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/qualys: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 2

Individual APIs this provider publishes, each with its own machine-readable definition.

Qualys VMDR API

REST/XML API for managing the full Vulnerability Management Detection and Response lifecycle including asset inventory, scans, vulnerability findings, prioritization, and report...

Qualys Authentication API

Authentication endpoint that issues JSON Web Tokens (JWT) used as Bearer credentials for newer Qualys APIs (VMDR OT, CSAM, TotalCloud). Clients post username and password to /au...

GraphQL 1

GraphQL schemas published by this provider.

Get Started 1

Portal, sign-up, and the first successful call

Free Trial

Free Trial

Documentation 1

Reference material describing how the API behaves

Documentation

Documentation

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

Access & Security 1

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Operate 3

Status, limits, changes, and where to get help

Community

Community

Support

Support

StatusPage

StatusPage

Commercial 1

Pricing, plans, and the legal terms of use

Pricing

Pricing

Company 3

The organization behind the API

LinkedIn

Website

Website

Blog

Blog

Other 1

Properties that don't map to a standard resource type

API Framework

API Framework

Source (apis.yml)

aid: qualys
name: Qualys
description: Qualys is a cloud-based security and compliance platform offering Vulnerability Management Detection and Response
  (VMDR), Policy Compliance, Web Application Scanning, Container Security, EDR, and Cloud Security Posture Management. The
  Qualys API framework exposes XML and JSON REST endpoints across platform pods (qualysapi.qualys.com, qualysapi.qg2.apps.qualys.com,
  etc.) for managing scans, assets, vulnerabilities, reports, and findings. Authentication supports HTTP Basic auth and JWT
  bearer tokens via the Qualys Authentication API.
type: Index
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/qualys.png
tags:
- Security
- Vulnerability Management
- Compliance
- VMDR
- Cloud Security
- Web Application Scanning
url: https://raw.githubusercontent.com/api-evangelist/qualys/refs/heads/main/apis.yml
created: '2026-05-11'
modified: '2026-05-11'
specificationVersion: '0.19'
apis:
- aid: qualys:vmdr-api
  name: Qualys VMDR API
  description: REST/XML API for managing the full Vulnerability Management Detection and Response lifecycle including asset
    inventory, scans, vulnerability findings, prioritization, and reports. Base URL varies per pod (US Platform 1 uses qualysapi.qualys.com);
    authentication is HTTP Basic with Qualys account credentials.
  humanURL: https://docs.qualys.com/en/vm/api/
  baseURL: https://qualysapi.qualys.com
  tags:
  - Vulnerability Management
  - Asset Inventory
  - Scans
  - Reports
  properties:
  - type: Documentation
    url: https://docs.qualys.com/en/vm/api/
  - type: API Quick Reference
    url: https://cdn2.qualys.com/docs/qualys-api-quick-reference.pdf
  - type: User Guide
    url: https://cdn2.qualys.com/docs/qualys-api-vmpc-user-guide.pdf
  - type: Pod URLs
    url: https://www.qualys.com/platform-identification/
  - url: graphql/qualys-graphql.md
    type: GraphQL
- aid: qualys:authentication-api
  name: Qualys Authentication API
  description: Authentication endpoint that issues JSON Web Tokens (JWT) used as Bearer credentials for newer Qualys APIs
    (VMDR OT, CSAM, TotalCloud). Clients post username and password to /auth and pass the returned token in the Authorization
    header on subsequent requests.
  humanURL: https://docs.qualys.com/en/vmdr-ot/api/vmdrot_api/ch01/get_started.htm
  baseURL: https://gateway.qg1.apps.qualys.com
  tags:
  - Authentication
  - JWT
  - Identity
  properties:
  - type: Documentation
    url: https://docs.qualys.com/en/vmdr-ot/api/vmdrot_api/ch01/get_started.htm
common:
- type: DomainSecurity
  url: security/qualys-domain-security.yml
- type: GitHubOrganization
  url: https://github.com/qualys
- type: LinkedIn
  url: https://www.linkedin.com/company/qualys
- type: Website
  url: https://www.qualys.com
- type: Documentation
  url: https://docs.qualys.com
- type: API Framework
  url: https://docs.qualys.com/en/vmdr-mobile/api/get_started/qualys_api_framework.htm
- type: Free Trial
  url: https://www.qualys.com/free-trial/
- type: Pricing
  url: https://www.qualys.com/forms/contact-us/
- type: Community
  url: https://success.qualys.com/discussions/s/
- type: Support
  url: https://www.qualys.com/support/
- type: StatusPage
  url: https://status.qualys.com
- url: https://blog.qualys.com/feed
  type: Blog
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com