The Qualys Cloud Platform gives you a continuous, always-on assessment of your global IT, security, and compliance posture, with 2-second visibility across all your IT assets, wherever they reside. And with automated, built-in threat prioritization, patching and other response capabilities, it’s a complete, end-to-end security solution.
Authentication with Qualys is performed via ‘Basic Authentication’. With this method of authenticating, valid Qualys user account credentials are required to make API requests to the Qualys API servers. These servers are hosted at the Qualys platform, also referred to as the Security Operations Center (SOC), where your account is located.
Important note:
Qualys user accounts that have been enabled with VIP two-factor authentication can be used with the Qualys API. However, two-factor authentication is not used when making API requests. Two-factor authentication is only supported when logging into the Qualys product.
Create a Resource and Credential in Tines
Login to your Tines tenant
Navigate to the team that will be using the API and click "Resource"
Click "+ New Resource"
Input the values for the Qualys resource
Name: Qualys_user
Description: Optional
Builder: Your Qualys username
Optional
Access: What other teams can also use the resource
Click "Save resource"
Navigate to the team that will be using the API and click "Credential"
Click "+ New Credential" and select "Text"
Input the values for the Qualys credential
Name: Qualys
Description: Optional
Value: Your Qualys password
Optional
Domains: Ensure that this credential can only be used when making HTTP requests to specific domains
Access: What other teams can also use the credential
Click "Save"
More on creating credentials in Tines here.
You can find a selection of Qualys stories in the story library.
Using the credential in an action
Here is an example Qualys action you can copy and paste onto your storyboard in Tines:
{"standardLibVersion":"35","actionRuntimeVersion":"4","agents":[{"disabled":false,"name":"List Reports in Qualys","description":"List Reports in Qualys","options":"{\"url\":\"https://<<RESOURCE.qualys>>/api/2.0/fo/report/\",\"method\":\"get\",\"payload\":{\"action\":\"list\"},\"headers\":{\"X-Requested-With\":\"Tines\"},\"basic_auth\":[\"<<RESOURCE.qualys_user>>\",\"<<CREDENTIAL.qualys>>\"]}","position":{"x":1455,"y":1515},"type":"httpRequest","timeSavedUnit":"minutes","timeSavedValue":0,"monitorAllEvents":false,"monitorFailures":false,"monitorNoEventsEmitted":null,"recordType":null,"recordWriters":[],"form":null,"cardIconName":"httpRequest","createdFromTemplateGuid":"d10e9805682e7786d922352f9d00077127037a8ca762627c20b8a33201a311cd","createdFromTemplateVersion":null,"originStoryIdentifier":"cloud:aa47f8215c6f30a0dcdb2a36a9f4168e:d4c15df0f02ba4789095426607003199"}],"links":[],"diagramNotes":[]}