🔵 Qualys Platform Deep Dive
VMDR · CSAM · WAS · TotalCloud · PC · Patch · FIM · EASM · Container · EDR
🔵
Qualys Platform — Complete Module Guide
10 modules, one platform. From asset discovery to vulnerability management, web app scanning, compliance, patching, and endpoint detection.
10 ModulesPolicy Compliance (PC)VMDR Deep DiveVuln Triage WorkflowPlatform FlowFAQsQualys vs Tenable
🏛️
The Qualys Philosophy
The Power of One — Architecture First

Qualys is built on a unified, cloud-native architecture. Unlike competitors who grew via acquisition, Qualys is a single platform where every module shares the same brain.

One Platform

A unified SaaS engine. No data siloing between VM, Compliance, and Cloud modules. Everything works together by design.

One Agent

A single ~3MB package for all modules. Once installed, you toggle features on/off instantly without new software deployments.

One Source of Truth

Every module references the exact same asset database. A single UUID per asset eliminates blind spots across security domains.

🗺️ Module → Use Case Map
Need:Find ALL assets (known + unknown)
CSAM
Need:Scan for vulnerabilities
VMDR
Need:Risk-based prioritization (CVSS + EPSS)
VMDR (TruRisk/QDS)
Need:Patch vulnerabilities automatically
Patch Management
Need:Test web apps & APIs (DAST)
WAS
Need:Cloud misconfiguration checks (CSPM)
TotalCloud
Need:Container & Kubernetes security
Container Security
Need:CIS / NIST / PCI-DSS compliance
Policy Compliance
Need:Monitor for unauthorized file changes
FIM
Need:See attack surface from internet view
EASM
Need:Detect active endpoint threats
Multi-Vector EDR
Need:Generate audit evidence reports
Policy Compliance + VMDR