Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Qualys Web Application Firewall (WAF) is a service based on virtual appliances designed to streamline application security while minimizing operational costs and complexity. Utilizing a cohesive platform, it consistently identifies threats using proprietary inspection logic and rulesets, and can provide virtual patches for web application vulnerabilities as necessary. Its straightforward, scalable, and flexible methodology enables rapid blocking of web application attacks, safeguarding sensitive information from exposure, and regulating access to your applications. Qualys WAF can function independently or in conjunction with Qualys Web Application Scanning (WAS), which enhances the process of discovering and addressing web application vulnerabilities efficiently, regardless of whether you manage a few applications or many. By employing Qualys WAS for scanning and enabling one-click virtual patches for any identified vulnerabilities in the WAF, users can oversee everything from a centralized cloud portal, ensuring seamless management. Moreover, the deployment of Qualys WAF can be completed in just minutes, and it offers support for SSL/TLS, further enhancing its security capabilities. This combination of features makes it a robust solution for protecting web applications in today’s ever-evolving threat landscape.

Description

A powerful cloud-based solution enables ongoing discovery and identification of vulnerabilities and misconfigurations in web applications. Designed entirely for the cloud, it offers straightforward deployment and management while accommodating millions of assets with ease. The Web Application Scanner (WAS) systematically locates and records all web applications within your network, including those that are new or previously unidentified, and can scale from just a few applications to thousands. Utilizing Qualys WAS, you have the ability to assign your own labels to applications, allowing for customized reporting and restricted access to scanning results. WAS employs dynamic deep scanning to thoroughly assess all applications within your perimeter, internal environment, active development stages, and APIs that serve mobile devices. Furthermore, it extends its coverage to public cloud instances, providing immediate insight into vulnerabilities such as SQL injection and cross-site scripting. The system supports authenticated, intricate, and progressive scanning methods. In addition, it incorporates programmatic scanning capabilities for SOAP and REST API services, effectively evaluating IoT services and the APIs utilized by contemporary mobile architectures, thereby enhancing your overall security posture. This comprehensive approach ensures that all aspects of your web applications are monitored and protected continuously.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Amazon Web Services (AWS) Yes 
Google Cloud Platform Yes 
Microsoft 365 Yes 
Microsoft Azure Yes 
BeyondTrust Endpoint Privilege Management No 
Forescout No 
ImmuniWeb No 
Ivanti Neurons for RBVM No 
Magento Yes 
Qualys WAS Yes 
Splunk Cloud Platform No 
ThreatConnect Risk Quantifier (RQ) No 
VMware Workstation Pro Yes 
appNovi No 
runZero No 

Integrations

Amazon Web Services (AWS) Yes 
Google Cloud Platform Yes 
Microsoft 365 Yes 
Microsoft Azure Yes 
BeyondTrust Endpoint Privilege Management Yes 
Forescout Yes 
ImmuniWeb Yes 
Ivanti Neurons for RBVM Yes 
Magento No 
Qualys WAS No 
Splunk Cloud Platform Yes 
ThreatConnect Risk Quantifier (RQ) Yes 
VMware Workstation Pro No 
appNovi Yes 
runZero Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Qualys

Founded

1999

Country

United States

Website

www.qualys.com/apps/web-app-firewall/

Vendor Details

Company Name

Qualys

Founded

1999

Country

United States

Website

www.qualys.com/apps/web-app-scanning/

Product Features

Web Application Firewalls (WAF)

Access Control / Permissions No 
Alerts / Notifications No 
Automate and Orchestrate Security No 
Automated Attack Detection No 
DDoS Protection No 
Dashboard No 
IP Reputation Checking No 
Managed Rules No 
OWASP Protection No 
Reporting / Analytics No 
Secure App Delivery No 
Server Cloaking No 
Virtual Patching No 
Zero-Day Attack Prevention No 

Product Features

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives

Qualys VMDR Reviews

Qualys VMDR

Qualys

Alternatives

Cloudxray Reviews

Cloudxray

Cloudnosys
Acunetix Reviews

Acunetix

Invicti Security