Knowing what’s on your global hybrid-IT environment is fundamental to security. Qualys Community Edition automatically discovers and inventories all of your global IT assets, everywhere: on-prem (devices and apps), endpoints, clouds, containers, OT, and IoT.
Qualys Community Edition.
Discover IT assets. Manage vulnerabilities. Scan web apps. Inventory cloud assets.
A free version of the Enterprise TruRisk Platform designed for the security community.

Request a full trial of the Enterprise TruRisk Platform.
By submitting this form, you consent to Qualys' privacy policy
Trusted globally by companies large and small


Qualys Community Edition Highlights
Discover your IT assets and their vulnerabilities, identify compliance gaps and get detailed reports using the industry's most accurate and comprehensive security assessment platform.
Automated global IT inventory
Comprehensive coverage and visibility
Qualys Community Edition conducts scans for the complete Qualys Knowledgebase of vulnerabilities for your IT infrastructure as well as web applications. The Qualys Knowledgebase includes thousands of CVEs and is updated continuously, ensuring awareness of the latest threats across your IT assets and web apps.
Instant visibility and unified threat assessment
Qualys Community Edition provides a unified, streamlined view of monitored assets and web apps through an interactive, customizable, and dynamic dashboard. You can drill down into asset details, vulnerabilities, and misconfigurations, search instantly, visualize data with widgets, and generate various report formats.
Continuous view of your security and compliance posture
Organizations can now leverage Qualys’ cloud platform and services to protect their own or their clients’ IT assets and web apps in hybrid IT environments—on-premises, in the cloud, or at endpoints.
See results in one place, in seconds
Qualys Community Edition provides a complete, continuously updated, and instant view of monitored IT assets and web apps from a single-pane-of-glass interface.
The customizable control panel lets you see the big picture, drill down into details, and generate reports
Intuitive and easy-to-build dynamic dashboards aggregate and correlate IT security and compliance data from various Qualys Cloud Apps in one place
Unlimited network mapping lets you keep track of internal and external assets, while monitoring for rogue devices and unwanted hosts

Discover and inventory all IT assets
Qualys Community Edition gives you 100%, real-time visibility of your global hybrid-IT environment. Whether on-prem (devices and apps) endpoints, clouds, containers, OT or IoT, Qualys will find it.
Automatically discovers, normalizes and catalogs all IT assets for clean, reliable, consistent data
Gathers comprehensive information on each asset, such as hardware details, running services, installed software and traffic. It also gathers advanced meta data such as hardware/software lifecycles, software licenses, vulnerabilities, and more
Quickly find any asset, or information on an asset, in seconds for immediate answers
See the security and compliance posture of each asset

Manage vulnerabilities
Hackers constantly look for disclosed but unpatched vulnerabilities which can act as an open door to your IT environment. The Qualys Community Edition offers vulnerability management, so that these dangerous bugs can be identified and remediated. Qualys can assess vulnerabilities on all internal IT infrastructure as well as external-facing assets to ensure a secure state.
Unlimited vulnerability scanning for up to 16 internal assets and 3 external assets
One virtual scanner appliance
Complete detection of entire Qualys KnowledgeBase

Scan web applications
Web apps are a preferred vector for data breaches because they often contain vulnerabilities and misconfigurations. Since they’re usually linked to back to the hosting web server, breached web apps offer hackers a direct path to corporate data. Qualys Community Edition gives you protection in this area with Qualys <a href="/apps/web-app-scanning/" class="text-[#2E8BE0] hover:text-[#1A77CC]">Web Application Scanning </a> for one web app URL.
Unlimited vulnerability scanning for one application URL
Assessments for the entirety of the OWASP Top 10 Most Critical Web Application Security Risks, including cross-site scripting (XSS), SQL injection and sensitive data exposure




