---
title: "Qualys VMDR Connector Guide"
slug: "qualys-vmdr-connector-guide"
updated: 2026-10-22T15:02:22Z
published: 2026-10-22T15:02:22Z
canonical: "docs.safe.security/qualys-vmdr-connector-guide"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safe.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Qualys VMDR Connector Guide

Qualys Vulnerability Management, Detection & Response (VMDR) enables vulnerability assessment and management for hybrid technology environments across IT, OT, and IoT. Qualys also offers Security Configuration Assessment (SCA), an optional add-on, that remediates security-related configuration issues based on the Center for Internet Security (CIS) Benchmarks. The **Balbix integration with Qualys VMDR** ingests on-premises and cloud infrastructure assets, associated vulnerabilities, software entities, configured operational and business information, and controls assessment information (when configured).

Balbix leverages AI to aggregate, normalize, and deduplicate ingested data, along with information integrated from your existing IT and cybersecurity tools. This creates a unified view of your entire asset inventory, including vulnerabilities and their business and operational context. Balbix’s AI models then analyze this data to provide insights such as deployment gap analysis, risk-based vulnerability prioritization (with detailed ranking and scoring), and risk quantification. This process delivers a comprehensive assessment of risk, whether for a single asset, groups of assets, or your entire enterprise, enabling more informed and effective security decisions.

## Integration Summary

The table below provides information about the integration type, asset types, and data types that are fetched by the Balbix connector for Qualys VMDR.

| **Integration Type** | **Fetch**: An inbound API integration used to fetch assets, vulnerabilities, control assessment information, and related metadata such as tags. |
| --- | --- |
| **Types of Assets Fetched** | Infrastructure devices such as servers, virtual machines, desktops, laptops, networking, IoT. |
| **Types of Data Fetched** | Asset names, hardware information, processor information, open port information, location information, interface information (MAC address, IP address), OS information, BIOS information, tags (flat and hierarchical), software information, system status, vulnerability information, relevant timestamps (e.g., first observed, last observed), control assessment findings. |

> [!NOTE]
> **Note:** Availability of specific fields, such as OS details, may depend on the Qualys VMDR implementation and whether a Qualys host-based agent has been deployed.

## Prerequisites

To configure the Balbix connector, you must first create Qualys VMDR API credentials with the appropriate permissions. These credentials are required for completing the configuration process.

### **Required Role Name(s)/Permissions**

- Manager role with full scope
- Reader role with full scope
- Non-manager role with the following permissions:
  - Access Permission: API Access
  - Asset Management Permission: Read Asset
  - Requested assets within scope

### **Auth Permissions and Roles**

To provide permissions and access to all objects in the subscription:

1. From the Qualys administration utility, select **Users > User Management**.
2. Click the user account, then **Actions > Edit**.
3. Go to **Roles and Scopes** and select the **Allow user full permissions and scope** option.

### **Enable User Access**

To enable user access to the API:

1. From the Qualys administration utility, click **User > User Profile**. The Edit User page will display.
2. From the left navigation sidebar, click **User Role**, and select the **API** option.
3. Click **Save**.

## Create and Configure the Connector

After you have completed the prerequisites, follow these steps to create and configure your Balbix connector for Qualys VMDR.

### Step 1: Select the Connector

Start by selecting a connector using the steps outlined below:

1. Go to **Data Sources** from the left navigation bar.
2. In the Connectors table, click **+ Add Connector**.
3. Click **Select a Connector to Configure** to expand the window and view the list of available connectors.
4. Click the **+** icon on the **Qualys VMDR** tile.
5. Choose **API** as the Integration Option, then click **Next** to configure the connector.

### Step 2: Configure the Connector

Configure the connector using the steps outlined below.

1. Fill in the required configuration fields.![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(918).png)

| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(339).png) | **Instance Name** |  |
| --- | --- | --- |
| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(340).png) | **Qualys VMDR Inventory Base URL** | Enter the *base API URL* of the server where asset information will be fetched (e.g., https://qualysapi.qualys.com). Make sure the authorized user for this account has the necessary privileges to access the API. |
| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(341).png) | **Qualys VMDR Vulnerability Base URL** | Enter the *base API URL* of the server where vulnerability information will be fetched. Make sure the authorized user for this account has the necessary privileges to access the API. |
| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(342).png) | **Qualys Username** | Enter the username for the user account with the necessary permissions to fetch assets and vulnerabilities. |
| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(343).png) | **Qualys Password** | Enter the password for the user account with the necessary permissions to fetch assets and vulnerabilities. |
| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(406).png) | **Qualys API Filter** |  |
| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(407).png) | **Asset Last Seen Days Filter** |  |
| ![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/image(857).png) | **Enable Hierarchical Tags** | Select this option to fetch Qualys tags via the hierarchical structure. |
2. Click **Test Connection**.
3. 

### Step 3: Schedule the Connector

### Step 4: Review Connector Details

## API Reference Documentation

To learn more about the Qualys VMDR API, see the references listed below:

- [Qualys API Quick Reference](https://www.qualys.com/docs/qualys-api-quick-reference.pdf)
- [Qualys Global IT Asset Inventory API v2 User Guide](https://www.qualys.com/docs/qualys-global-ai-api-v2-user-guide.pdf)
- [Qualys API Documentation: Vulnerability Management and Policy Compliance](https://qualysguard.qg2.apps.qualys.com/qwebhelp/fo_portal/api_doc/index.htm)
- [Qualys API Documentation](https://qualysguard.qg2.apps.qualys.com/qwebhelp/fo_portal/api_doc/assets/index.htm#t=get_started%2Fget_started.htm&rhsearch=%2Frest%2F2.0&rhsyns=%20)
- [Qualys Asset Management & Tagging API User Guide](https://www.qualys.com/docs/qualys-asset-management-tagging-api-v2-user-guide.pdf)
- [Setting up CIS Policies for Qualys SCA](https://qualysguard.qg2.apps.qualys.com/qwebhelp/fo_portal/module_sca/csa_cis_policies.htm)
- [Qualys Platform Identification](https://www.qualys.com/platform-identification/)