Overview

Scrut integrates with Qualys to pull vulnerability scan results, asset coverage, and remediation status. Use it to demonstrate continuous vulnerability management, track findings to closure, and maintain audit-ready security evidence.

Why Connect

• Pull vulnerability findings and asset coverage into one place.
• Track remediation progress to closure more easily.
• Support audit evidence for continuous vulnerability management.

Supported Automated Tests

Scrut provides pre-built automated tests for Qualys. Here are a few examples of Scrut’s Qualys tests:

• Access reviews completed for all in-scope applications
• Qualys accounts associated with users
• Qualys accounts deprovisioned when employees leave

Supported Automated Evidence

Scrut automates the collection of some evidences for Qualys. Here are a few examples of Scrut’s Qualys-driven evidences that can be collected:

• Offboarding - Logical Access & Physical Access Revocation
• Reports of User Access Reviews
• Report of Vulnerability Scan and Remediation Status
• User Access Approval list to Application, Infrastructure and Service