Qualys Web Application Scanning (WAS) step configuration

Scan application instances with Qualys WAS.

You can ingest your application scan results from Qualys Web Application Scanning (WAS) into STO.

Workflow description

Custom Scan step settings for Qualys scans in STO

The recommended workflow is to add a Custom Scan step to a Security or Build stage and then configure it as described below.

Scanner settings

These settings are required for most scanners. For more information, go to the reference for the scanner integration you're setting up.

• Product name

• Scan type

• Policy type

• Product config name

Product name

Key

product_name

Value

qualys

Scan type

The target type to scan.

Key

scan_type

Value

instance

Policy type

The scan mode to use.

Key

policy_type

Value

ingestionOnly

Product config name

Key

product_config_name

Value

default

Target and variant

Ingestion file

Fail on Severity

Proxy settings