# Qualys

**Canonical:** https://apis.io/providers/qualys/  
**Website:** https://www.qualys.com  
**APIs profiled:** 2

Qualys is a cloud-based security and compliance platform offering Vulnerability Management Detection and Response (VMDR), Policy Compliance, Web Application Scanning, Container Security, EDR, and Cloud Security Posture Management. The Qualys API framework exposes XML and JSON REST endpoints across platform pods (qualysapi.qualys.com, qualysapi.qg2.apps.qualys.com, etc.) for managing scans, assets, vulnerabilities, reports, and findings. Authentication supports HTTP Basic auth and JWT bearer tokens via the Qualys Authentication API.

## Kin Score — 22.3 / 100 (emerging)

Scored 2026-08-21 under rubric 0.12.0. Trend: flat (+0.0 from 22.3).

| Facet | Score |
|---|---|
| Discoverability | 68.5 |
| Contract Quality | 38.9 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 18.4 |
| Developer Ergonomics | 16.7 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 15.4 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## APIs (2)

- **Qualys VMDR API** — REST/XML API for managing the full Vulnerability Management Detection and Response lifecycle including asset inventory, scans, vulnerability findings, prioritization, and report...
- **Qualys Authentication API** — Authentication endpoint that issues JSON Web Tokens (JWT) used as Bearer credentials for newer Qualys APIs (VMDR OT, CSAM, TotalCloud). Clients post username and password to /au...

## Security (1)

- **Qualys Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Tags

Security, Vulnerability Management, Compliance, VMDR, Cloud Security, Web Application Scanning

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/qualys/). Scores are computed from the provider's own public artifacts under a published rubric.