This article describes how to configure the platform to import Scan Reports or Web Application Reports from Qualys WAS. The details below describe how the platform can automatically retrieve reports from Qualys WAS.

...

The Platform’s API support for Qualys WAS allows web application scan results to be retrieved based on either a Scan Report or Web Application ReportReports.

When Qualys WAS reports have been created in Qualys WAS, the platform can use the Qualys API to enumerate these reports and retrieve their underlying XML data.

Reports from Qualys WAS must be of the XML format and be of type “Scan Report” or “Web Application Report”

Requirements for Reports in Qualys WAS

Please refer to the following article that describes the type of reports support by the Platform:

Supported XML Formats from Qualys VM & WAS

Configuring Auto Import in Platform

During the creation of a new Project, When editing a Project in the Platform, the Project’s Service Type must be set to “Managed Vulnerability Scanning” and the “Auto Import” feature must be enabled in the project’s settings. Enabling this feature presents the In doing so, an “Auto Importer” section appears where auto imports can be defined:

...

WAS Reports in Qualys are identified by the Platform using their Report Name. This is necessary so that the Platform can periodically connect to the Qualys API, enumerate WAS Reports (either of type Scan Report or Web Application Report) and retrieve the relevant report with a [partially/fully] matching name:

...