# Qualys Integration

Last Updated On: 10 Aug 2026  
3 minutes read

By seamlessly integrating Qualys into the Patch Manager Plus console, you can now efficiently address identified vulnerabilities with the deployment of corresponding patches. Bid farewell to the hassle of navigating to multiple dashboards and manually mapping vulnerabilities with the appropriate patches. This integration handles it all for you, simplifying the entire process and saving valuable time and effort.

## Pre-Requisites

1. Create a Manager User account in Qualys with read permissions to Vulnerability and Asset Data.
2. Your user account must have permission to the below three APIs:
   - **GET** https:/(Qualys API Base URL)/api/4.0/fo/asset/host/
   - **GET** https:/(Qualys API Base URL)/api/3.0/fo/asset/host/vm/detection/
   - **GET** https:/(Qualys API Base URL)/api/3.0/fo/knowledge_base/vuln/

## Steps to integrate Qualys with Patch Manager Plus

![Steps to integrate Qualys](https://www.manageengine.com/products/desktop-central/how-to/images/qualys-integration.png)

1. In Patch Manager Plus console, navigate to **Admin -> Integrations -> Threat Scanner Settings**. In the **Integrate Now** dropdown, select **Qualys**.
2. Provide the **API server URL** under the option **Qualys base URL** (this URL will change with respect to your Qualys account). To identify your API server URL with respect to your Qualys account, refer to [this page](https://www.qualys.com/platform-identification). The API Server URL will start with **https://qualysapi**.
3. Set up a new user account with VMDR UI and API permissions exclusively for your company's computers. For multi-tenant accounts managing multiple entities, do not use these. Create a distinct account for your organization.
4. Configure the frequency of sync of Qualys with Patch Manager Plus under **Sync Details**.
5. After configuring all the necessary integration settings, click on **Save** to enable the integration.

## Workflow

- After enabling the integration, Patch Manager Plus will import the vulnerability details and the affected machine details from Qualys.
- Identify the corresponding patch/fix for the respective vulnerabilities and remediate those vulnerabilities by installing the appropriate patch.
- Threats detected by Qualys, with patch availability, will be listed under **Threats & Patches > Qualys Threats**. You can also deploy patches for vulnerabilities from this view.