# Qualys integrations: VM scans and hosts

> Update hosts and add IPs in Qualys. Connect Qualys to the rest of your security and compliance stack with Tray.ai.

**Canonical page:** https://tray.ai/connectors/qualys-integrations/
**Categories:** Security and compliance
**Connects through:** HTTP Connector

## Overview

Qualys is a cloud security platform that scans networks, hosts and cloud assets for vulnerabilities and checks systems against compliance policies, with reports and remediation tickets. Tray.ai connects to Qualys through the HTTP Connector, so your workflows can call the Qualys API alongside the rest of your stack.

## Use cases

### VM scans

Read vm scans in Qualys from any Tray.ai workflow. The Qualys API covers calls such as list VM scans and launch a VM scan.

- List VM scans
- Launch a VM scan
- Manage VM scans

### Hosts

Read and update hosts in Qualys from any Tray.ai workflow. The Qualys API covers calls such as list hosts and update hosts.

- List hosts
- Update hosts
- List host detections

### Asset groups

Read asset groups in Qualys from any Tray.ai workflow. The Qualys API covers calls such as list asset groups and manage asset groups.

- List asset groups
- Manage asset groups

### IPs

Read, create, and update ips in Qualys from any Tray.ai workflow. The Qualys API covers calls such as list IPs and add IPs.

- List IPs
- Add IPs
- Update IPs

### Reports

Read and delete reports in Qualys from any Tray.ai workflow. The Qualys API covers calls such as list reports and launch a report.

- List reports
- Launch a report
- Download a saved report

### Remediation tickets

Update and delete remediation tickets in Qualys from any Tray.ai workflow. The Qualys API covers calls such as view the ticket list and edit tickets.

- View the ticket list
- Edit tickets
- Delete tickets

## Challenges Tray.ai solves

### Keeping Qualys credentials out of logs

A raw API call usually means pasting a key or token into the request, where it ends up in step inputs, logs, and screenshots.

**How Tray.ai helps:** Store Qualys credentials once as a Tray.ai authentication and reference them from the HTTP Connector. Tray.ai masks authentication values in logs, so the secret never shows up in a step's input or output.

### Going from the Qualys API docs to a working call

Translating an example request from API docs into a workflow step means copying the method, URL, headers, and body by hand.

**How Tray.ai helps:** Paste a cURL example from the Qualys API docs into the HTTP Connector and Tray.ai fills in the method, URL, headers, and body for you.

### Handling files and non-JSON responses

Not every API answers in JSON. Some return XML, files, or binary data, or expect a multipart upload.

**How Tray.ai helps:** The HTTP Connector parses JSON and XML responses, returns files you can pass to the next step, and sends multipart form data for uploads.

## Frequently asked questions

### Does Tray.ai connect to Qualys?

Yes. Tray.ai connects to Qualys through the HTTP Connector, which calls the Qualys API directly. Any call the Qualys API documents can run as a step in a Tray.ai workflow.

### How does Tray.ai authenticate with Qualys?

The Qualys API uses basic authentication. You save it once as a Tray.ai authentication, and the HTTP Connector adds it to every request.

### Can I get a dedicated Qualys connector?

Qualys runs through the HTTP Connector rather than a dedicated connector. If your team wants one, the Tray.ai connector SDK can build a dedicated Qualys connector from the Qualys API.

## Learn more

- Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/
- Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/
- Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/
- Book a demo: https://tray.ai/contact/