Qualys Authentication Guide

How to authenticate Qualys for use with Tines

Daniel Stoeski avatar
Written by Daniel Stoeski
Updated over a week ago

The Qualys Cloud Platform gives you a continuous, always-on assessment of your global IT, security, and compliance posture, with 2-second visibility across all your IT assets, wherever they reside. And with automated, built-in threat prioritization, patching and other response capabilities, it’s a complete, end-to-end security solution.

Authentication with Qualys is performed via ‘Basic Authentication’. With this method of authenticating, valid Qualys user account credentials are required to make API requests to the Qualys API servers. These servers are hosted at the Qualys platform, also referred to as the Security Operations Center (SOC), where your account is located.

Important note:
Qualys user accounts that have been enabled with VIP two-factor authentication can be used with the Qualys API. However, two-factor authentication is not used when making API requests. Two-factor authentication is only supported when logging into the Qualys product.

Create a Resource and Credential in Tines

  1. Login to your Tines tenant

  2. Navigate to the team that will be using the API and click "Resource"

  3. Click "+ New Resource"

  4. Input the values for the Qualys resource

    • Name: Qualys_user

    • Description: Optional

    • Builder: Your Qualys username

  5. Optional

    • Access: What other teams can also use the resource

  6. Click "Save resource"

  7. Navigate to the team that will be using the API and click "Credential"

  8. Click "+ New Credential" and select "Text"

  9. Input the values for the Qualys credential

    • Name: Qualys

    • Description: Optional

    • Value: Your Qualys password

  10. Optional

    • Domains: Ensure that this credential can only be used when making HTTP requests to specific domains

    • Access: What other teams can also use the credential

  11. Click "Save"

More on creating credentials in Tines here.

You can find a selection of Qualys stories in the story library.

Using the credential in an action

Here is an example Qualys action you can copy and paste onto your storyboard in Tines:

{"standardLibVersion":"35","actionRuntimeVersion":"4","agents":[{"disabled":false,"name":"List Reports in Qualys","description":"List Reports in Qualys","options":"{\"url\":\"https://<<RESOURCE.qualys>>/api/2.0/fo/report/\",\"method\":\"get\",\"payload\":{\"action\":\"list\"},\"headers\":{\"X-Requested-With\":\"Tines\"},\"basic_auth\":[\"<<RESOURCE.qualys_user>>\",\"<<CREDENTIAL.qualys>>\"]}","position":{"x":1455,"y":1515},"type":"httpRequest","timeSavedUnit":"minutes","timeSavedValue":0,"monitorAllEvents":false,"monitorFailures":false,"monitorNoEventsEmitted":null,"recordType":null,"recordWriters":[],"form":null,"cardIconName":"httpRequest","createdFromTemplateGuid":"d10e9805682e7786d922352f9d00077127037a8ca762627c20b8a33201a311cd","createdFromTemplateVersion":null,"originStoryIdentifier":"cloud:aa47f8215c6f30a0dcdb2a36a9f4168e:d4c15df0f02ba4789095426607003199"}],"links":[],"diagramNotes":[]}
Did this answer your question?