Qualys EDR
Connect Qualys EDR to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Qualys EDR to collect vulnerability scanning evidence with automated compliance tests, switched on per workspace.
| Category | Vulnerability Scanning |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Qualys EDR's guide | docs.qualys.com |
Connect with an API token
-
In Qualys EDR:
- Create a dedicated user for Safeguard under Users › User Accounts.
- Use that user's username and password in Safeguard.
Where to find the other values:
- API URL: Your Qualys platform's API gateway. Identify the platform from the identifier inside your Qualys username using Qualys' Platform Identification page (for example quays_ab1 is US1, quays-ab1 is EU1).
- Username: The Qualys login name of the user you created.
Qualys EDR's public documentation does not cover every step.
Source: docs.qualys.com, docs.qualys.com, qualys.com, checked 2026-10-07.
The permissions Safeguard needs:
Reader (EDR). -
On Compliance › Connectors, open Qualys EDR, click Connect, choose API token and fill in:
Field What to enter API URL Required. For example: https://gateway.qg1.apps.qualys.com Username Required. Password Required. Stored encrypted and never shown again. -
Click Connect with token.
Frameworks
Safeguard's automated tests read Qualys EDR and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.8, CC7.3, CC7.4 | 3 |
| ISO/IEC 27001 | Automated tests | A.5.26, A.8.1, A.8.7, A.8.16 | 3 |
| HIPAA Security Rule | Automated tests | 164.308(a)(5), 164.308(a)(6) | 3 |
| PCI DSS | Automated tests | 5.2.1, 12.10.1 | 3 |
| NIST CSF 2.0 | Automated tests | DE.AE-02, DE.CM-09, RS.MI-02 | 3 |
These tests are switched on per workspace by the Safeguard team.
Related
- Vulnerability Scanning connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks