Qualys Certification and Training Center

Welcome to the Qualys Certification and Training Center where you can take free training courses with up-to-date hands-on labs featuring the latest Qualys Suite features and best practices. Available self-paced, in-person and online

Free Training | Create an account

Certified Courses
Video Libraries
Onboarding Training
Instructor-Led Training

Take free self-paced or instructor-led certified training on core Qualys topics, and get certified.

Get Started: Video overview | Enrollment instructions

Vulnerability Management Learning Path:

Vulnerability Management Foundation (optional) Understand the basics of Vulnerability Management.

Vulnerability Management, Detection, and Response An introduction to core Qualys sensors and core VMDR functionality.

CyberSecurity Asset Management (CSAM) Learn to organize and manage data in a better way using various features of the CSAM application.

Enterprise TruRisk™ Management You will learn how ETM enables security teams to elevate risk management to a strategic level while ensuring continuous oversight and data-driven decision-making.

Scanning Strategies Scan a complex network of devices.

Reporting Strategies Build a reporting program that impacts security decisions.

Patch Management Accelerate vulnerability remediation for all your IT assets.

Policy Compliance Learning Path:

Policy Compliance Foundation (optional) Understand the basics of Policy Compliance.

Policy Compliance Learn how to verify the baseline configuration of your host assets.

PCI Compliance Learning Path:

PCI Compliance Foundation (optional) Understand the basics of PCI Compliance.

PCI Compliance See how to scan your assets for PCI Compliance.

Endpoint Detection and Response Learning Path:

Endpoint Detection and Response Foundation (optional) Understand the basics of EDR and endpoint security.

Endpoint Detection and Response Learn how to secure endpoints and hunt for malware with Qualys EDR.

Foundational courses:

Endpoint Detection and Response Foundation Understand the basics of EDR and endpoint security.

Vulnerability Management Foundation Understand the basics of Vulnerability Management.

Policy Compliance Foundation Understand the basics of Policy Compliance.

PCI Compliance Foundation Understand the basics of PCI Compliance.

Additional certified courses:

Administration Learn about subscription administration and using the Qualys Administration Utility.

Qualys Flow (QFlow) Learn how to automate detection & remediation with no-code Workflows with Qualys Flow (QFlow).

Custom Assessment and Remediation (CAR) Learn to create reusable custom detections and remediations, including deploying custom configurations and applications.

Endpoint Detection and Response Learn how to secure endpoints and hunt for malware with Qualys EDR.

Qualys Query Language (QQL) Learn the basics of Qualys Query Language in this course. You will use Qualys Query Language (QQL) for building search queries to fetch information from Qualys databases.

API Fundamentals Learn the basics of the Qualys API in Vulnerability Management.

Cloud Agent Learn how to configure and deploy Cloud Agents.

Container Security Learn the core features of Qualys Container Security and best practices to secure containers.

File Integrity Monitoring Log and track file changes across your global IT systems.

PCI Compliance See how to scan your assets for PCI Compliance.

Web Application Scanning Learn the core features of Qualys Web Application Scanning.

TotalCloud Learn how to monitor and secure your public cloud infrastructure using Qualys TotalCloud.

Watch individual videos to learn specific skills and techniques with Qualys.

Foundations:

Enterprise TruRisk Platform Foundations Learn how to accelerate vulnerability remediation for all your global IT Assets.

Qualys Sensors Foundations Learn how Qualys Sensors work, their purpose, and how they enhance security. Explore different sensor types, their functions, and the EASM discovery process.

Asset & Attack Surface Management:

Cyber Security Asset Management Learn how to gain visibility to all your enterprise assets by effectivily inventoring and tracking them to assist in detecting, monitoring and remediating unwanted or potential cyber risks on them.

External Attack Surface Management Quickly discover all you external facing assets, setup continuous monitoring and lower your organization's cyber risk.

Enterprise TruRisk™ Management Qualys Enterprise Risk Management empowers organizations to identify, assess, and mitigate risks effectively.

Vulnerability Management:

VMDR with TruRisk Get started with the basics of Vulnerability Management. Learn to organize assets, scan for vulnerabilities, prioritize remediation and create effective reports and dashboards.

Scanning Strategies Dive into the vulnerability scanning process and strategies within an enterprise.

Reporting Strategies Dive into the vulnerability reporting process and strategies within an enterprise.

Continuous Monitoring Learn how to setup real time alerts for identifying threats and monitoring unexpected network changes before they turn into breaches.

Certificate View Get an inventory of your certificates, configure as per best practices, and assess them for vulnerabilities

Qualys Sensors:

Qualys Scanner Appliance Learn how to deploy and troubleshoot the Qualys Scanner Appliance.

Network Passive Sensor Learn how to automatically detect and profile all network connected systems, eliminating blind spots across your IT environment.

Cloud Agent Learn about the Cloud Agent features, as well as how to deploy, configure, tune and troubleshoot the Qualys Cloud Agent.

Qualys Gateway Service Learn about the Qualys Gateway Server, its use cases, and how to setup and configure it.

Risk Remediation:

Patch Management Learn how to accelerate vulnerability remediation for all your global IT Assets.

Custom Assessment and Remediation (CAR) Learn how to create reusable custom detections and remediations, including deploying custom configurations and applications.

TruRisk Eliminate Learn how to reduce cyber risk comprehensively for your global IT assets by integrating patch management, mitigation and isolation to proactively remediate vulnerabilities.

Application Security:

Web Application Scanning Learn the core features of Qualys Web Application Scanning as well as best practices to effectively build a web application security program for your organization.

TotalAppSec Learn the core features of Qualys TotalAppSec as well as best practices to effectively build a Web Application and API security program for your organization.

Compliance Solutions:

Policy Compliance Learn how to configure scanning, define controls, generate reports, and implement best practices for effectively maintaining a secure and compliant IT environment.

PCI Compliance Learn how to scan your assets for PCI Compliance.

File Integrity Monitoring Log and track file changes across your global IT systems.

Security Assessment Questionnaire Learn how to build and manage automated questionaires using templates to assess IT security risk to your business.

Cloud and Container Security:

TotalCloud Get visibility into your comprehensive security for your multi-cloud environment.

Container Security Learn the core features of Qualys Container Security and best practices to secure containers.

Endpoint Security Solutions:

EDR Walk through the steps for configuring Qualys EDR.

Qualys Platform:

Qualys Query Language Build search queries in the UI to fetch data from your subscription.

Qualys API Fundamentals Learn the basics of the Qualys API.

Qualys Flow (QFlow) Automate Detection & Remediation with No-code Workflows

Qualys Subscription Health Learn how to manage your Qualys subscription health

Administration Learn how to create and manage user accounts and roles within the Qualys Platform Administration Module.

Onboarding Training is designed to get new customers moving as quickly as possible. It is not a certified training. If you just purchased VMDR, this is where you should start.

Onboarding Training for External Attack Surface Management This is the fastest way to get started with EASM.

Onboarding Training for TotalCloud This is the fastest way to get started with TotalCloud.

Onboarding Training for VMDR This is the fastest way to get started with VMDR.

Onboarding Training for Patch Management This is the fastest way to get started with Patch Management.

Class

Date

Time

Location

Enterprise TruRisk™ Management (ETM)

Enterprise TruRisk™ Management (ETM)

Course Name: Enterprise TruRisk™ Management (ETM) - Instructor-led Course

Course Duration: 3 Hours

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on Enterprise TruRisk™ Management (ETM) - ILT

Aug 7

11:00 AM Eastern Daylight Time

Online

Sign Up

Implementing Risk Reduction using Qualys ETP

Implementing Risk Reduction using Qualys ETP

Course Name: Implementing Risk Reduction using Qualys ETP - Instructor-Led Session

This course is designed to cover various features and operations of Qualys Applications like VMDR, CSAM, and TruRisk Eliminate.

Delivery Mode: Online or Classroom (On-Location), Instructor-Led Sessions

Course Duration: 8 Hours

To download the course details, click on Implementing Risk Reduction using Qualys ETP - Instructor-led Course

Aug 12

10:00 AM India Standard Time

Online

Sign Up

TotalCloud (TC)

TotalCloud (TC)

Course Name: TotalCloud (TC) - Instructor-Led Course

Course Duration: 8 Hours

This is 2-Days Instructor-Led Training Session

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on TotalCloud (TC) - Instructor-Led Course

Aug 12

11:00 AM Eastern Daylight Time

Online

Sign Up

Policy Audit

Policy Audit

Course Name: Policy Audit (PA) - Instructor-Led Course

Course Duration: 8 Hours

Delivery Mode: Online, Instructor-Led Sessions

Class Note: This session will be delivered in Italian Language and is only for Italy customer/users

To download the course details, click on Policy Audit (PA) - Instructor-Led Course

Aug 15

8:30 AM Eastern Daylight Time

Online

Sign Up

Qualys TotalAppSec

Qualys TotalAppSec

Course Name: Qualys TotalAppSec - Instructor-Led Course

Course Duration: 8 Hours

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on Qualys TotalAppSec - Instructor-Led Course

Aug 19

10:00 AM India Standard Time

Online

Sign Up

Vulnerability Management Detection and Response

Vulnerability Management Detection and Response

Class Details: Vulnerability Management Detection and Response - Online (Split Session)

Course Duration: 8 Hours

This is 2-Days Instructor-Led Training Session

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on Vulnerability Management Detection and Response (VMDR) - Instructor-Led Course

Aug 19

11:00 AM Eastern Daylight Time

Online

Sign Up

Cloud Agent

Cloud Agent

Course Name: Cloud Agent (CA) - Instructor-Led Course

Course Duration: 4 Hours

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on Cloud Agent (CA) - Instructor-Led Course

Aug 26

10:00 AM India Standard Time

Online

Sign Up

Qualys TotalAppSec

Qualys TotalAppSec

Course Name: Qualys TotalAppSec - Instructor-Led Course

Course Duration: 8 Hours

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on Qualys TotalAppSec - Instructor-Led Course

Aug 27

11:00 AM Eastern Daylight Time

Online

Sign Up

Enterprise TruRisk™ Management (ETM)

Enterprise TruRisk™ Management (ETM)

Course Name: Enterprise TruRisk™ Management (ETM) - Instructor-led Course

Course Duration: 3 Hours

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on Enterprise TruRisk™ Management (ETM) - ILT

Aug 28

10:00 AM India Standard Time

Online

Sign Up

Vulnerability Management Detection and Response

Vulnerability Management Detection and Response

Class Details: Vulnerability Management Detection and Response - Online (Split Session)

Course Duration: 8 Hours

This is 2-Days Instructor-Led Training Session

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on Vulnerability Management Detection and Response (VMDR) - Instructor-Led Course

Sep 2

10:00 AM India Standard Time

Online

Sign Up

Vulnerability Management Detection and Response

Vulnerability Management Detection and Response

Course Name: Vulnerability Management Detection and Response (VMDR) - Instructor-Led Course

Course Duration: 8 Hours

Delivery Mode: Online, Instructor-Led Sessions

Class Note: This session will be delivered in Italian Language and is only for Italy customer/users

To download the course details, click on Vulnerability Management Detection and Response (VMDR) - Instructor-Led Course

Sep 8

9:30 AM Central European Summer Time

Online

Sign Up

CyberSecurity Asset Management (CSAM)

CyberSecurity Asset Management (CSAM)

Course Name: CyberSecurity Asset Management (CSAM) - Online (Split Session)

Course Duration: 6 Hours

This is 2-Days Instructor-Led Training Session

Delivery Mode: Online, Instructor-Led Sessions

To download the course details, click on CyberSecurity Asset Management (CSAM) - Instructor-Led Course

Sep 9

10:00 AM India Standard Time

Online

Sign Up

Qualys TotalAppSec

Qualys TotalAppSec

Course Name: Qualys TotalAppSec - Instructor-Led Course

Course Duration: 8 Hours

Delivery Mode: Online, Instructor-Led Sessions

Class Note: This session will be delivered in Italian Language and is only for Italy customer/users

To download the course details, click on Qualys TotalAppSec - Instructor-Led Course

Sep 9

9:30 AM Central European Summer Time

Online

Sign Up

Unlock the Full Potential of Your Asset Tags

Unlock the Full Potential of Your Asset Tags

Sep 9

11:00 AM British Summer Time

Online

Sign Up

Policy Audit

Policy Audit

Course Name: Policy Audit (PA) - Instructor-Led Course

Course Duration: 8 Hours

Delivery Mode: Online, Instructor-Led Sessions

Class Note: This session will be delivered in Italian Language and is only for Italy customer/users

To download the course details, click on Policy Audit (PA) - Instructor-Led Course

Sep 12

9:30 AM Central European Summer Time

Online

Sign Up

Implementing Risk Reduction using Qualys ETP

Implementing Risk Reduction using Qualys ETP

Course Name: Implementing Risk Reduction using Qualys ETP - Instructor-Led Session

This course is designed to cover various features and operations of Qualys Applications like VMDR, CSAM, and TruRisk Eliminate.

Delivery Mode: Online or Classroom (On-Location), Instructor-Led Sessions

Course Duration: 8 Hours

To download the course details, click on Implementing Risk Reduction using Qualys ETP - Instructor-led Course

Sep 16

10:00 AM India Standard Time

Online

Sign Up

Platform
- | Platform
- Overview
- Enterprise TruRisk Platform
  Everything you need to measure, manage, and reduce your cyber risk in one place.
- Capabilities
- All
  - | Platform
  - Risk Operations Center (ROC)
  - Enterprise TruRisk Management / CTEM ^NEW
    Consolidate & translate security & vulnerability findings from 3rd party tools
    
    Agentic AI ^NEW
  - Vulnerability & Configuration Management
  - TotalAppSec ^NEW
    Get AI-powered, unified application risk management with web app & API security testing and malware detection all-in-one
    
    TotalAI ^NEW
    Holistic AI security with vulnerability assessment and protection
    
    Vulnerability Management, Detection & Response (VMDR)
    Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster
  - Asset Management
  - CyberSecurity Asset Management (CSAM)
    See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software
    
    External Attack Surface Management (EASM)
    Gain an attacker’s view of your external internet-facing assets and unauthorized software
  - Risk Remediation
  - TruRisk Eliminate (TE) ^NEW
    Address critical vulnerabilities with flexible, patchless solutions
    
    Patch Management (PM)
    Efficiently remediate vulnerabilities and patch systems
    
    Custom Assessment and Remediation (CAR)
    Quickly create custom scripts and controls for faster, more automated remediation
  - Threat Detection & Response
  - Multi-Vector EDR
    Advanced endpoint threat protection, improved threat context, and alert prioritization
  - Compliance
  - Policy Audit ^NEW
    Reduce risk, and comply with internal policies and external regulations with ease
    
    File Integrity Monitoring (FIM)
    Reduce alert noise and safeguard files from nefarious actors and cyber threats
  - Cloud Security
  - TotalCloud (CNAPP)
    Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.
    
    Cloud Security Posture Management (CSPM)
    Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.
    
    Kubernetes and Container Security (KCS)
    Discover, track, and continuously secure containers – from build to runtime
    
    Cloud Workload Protection (CWP)
    Detect, prioritize, and remediate vulnerabilities in your cloud environment
    
    Cloud Infrastructure and Entitlement Management (CIEM)
    Solution to automate the process of managing user entitlements and privileges in cloud environments
    
    Cloud Detection and Response (CDR)
    Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.
    
    SaaS Security Posture Management (SSPM)
    Automate the process of managing your SaaS apps, including global settings, user privileges, licenses, files, and their security and compliance posture.
- Risk Operations Center (ROC)
  - | Platform
  - Risk Operations Center (ROC)
  - Enterprise TruRisk Management / CTEM ^NEW
    Consolidate & translate security & vulnerability findings from 3rd party tools
    
    Agentic AI ^NEW
- Vulnerability & Configuration Management
  - | Platform
  - Vulnerability & Configuration Management
  - TotalAppSec ^NEW
    Get AI-powered, unified application risk management with web app & API security testing and malware detection all-in-one
    
    TotalAI ^NEW
    Holistic AI security with vulnerability assessment and protection
    
    Vulnerability Management, Detection & Response (VMDR)
    Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster
    
    Web App Scanning (WAS)
    Automate scanning in CI/CD environments with shift left DAST testing
    
    API Security
    Scan REST/SOAP APIs & check API compliance with shift-left API testing
    
    Web Malware Detection
    Identify known and zero-day attacks using deep learning-based web malware detection
- Asset Management
  - | Platform
  - Asset Management
  - CyberSecurity Asset Management (CSAM)
    See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software
    
    External Attack Surface Management (EASM)
    Gain an attacker’s view of your external internet-facing assets and unauthorized software
- Risk Remediation
  - | Platform
  - Risk Remediation
  - TruRisk Eliminate (TE) ^NEW
    Address critical vulnerabilities with flexible, patchless solutions
    
    Patch Management (PM)
    Efficiently remediate vulnerabilities and patch systems
    
    Custom Assessment and Remediation (CAR)
    Quickly create custom scripts and controls for faster, more automated remediation
- Threat Detection & Response
  - | Platform
  - Threat Detection & Response
  - Multi-Vector EDR
    Advanced endpoint threat protection, improved threat context, and alert prioritization
- Compliance
  - | Platform
  - Compliance
  - Policy Audit ^NEW
    Reduce risk, and comply with internal policies and external regulations with ease
    
    File Integrity Monitoring (FIM)
    Reduce alert noise and safeguard files from nefarious actors and cyber threats
- Cloud Security
  - | Platform
  - Cloud Security
  - TotalCloud (CNAPP)
    Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.
    
    Cloud Security Posture Management (CSPM)
    Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.
    
    Kubernetes and Container Security (KCS)
    Discover, track, and continuously secure containers – from build to runtime
    
    Cloud Workload Protection (CWP)
    Detect, prioritize, and remediate vulnerabilities in your cloud environment
    
    Cloud Infrastructure and Entitlement Management (CIEM)
    Solution to automate the process of managing user entitlements and privileges in cloud environments
    
    Cloud Detection and Response (CDR)
    Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.
    
    SaaS Security Posture Management (SSPM)
    Automate the process of managing your SaaS apps, including global settings, user privileges, licenses, files, and their security and compliance posture.
Solutions
- | Solutions
- Use Cases
- Risk Operations Center ^NEW
- Endpoint Security
- Compliance
- PCI Compliance
- Cloud Security
- DevOps
- Threat Protection
- Software Supply Chain Risk
- NIS2
- Segments
- Small Business
- Mid-Sized Business
- Enterprise
- Public Sector
Customers
- Customers
- Overview
- Best Practices
- Success Stories
- Testimonials
Resources
- | Resources
- Resources
- Resources Library
- Product Tours
- Blog
- Webinars
- Qualys Stream
- Research
- Threat Research Unit
- Security Alerts
- Security Advisories
Support
- Support
- Support Portal
- Free Training
- Documentation
- Community Discussions
- Knowledgebase
- Release Notes
- Release Notifications
More
- | More
- Partners
- Overview
- Managed Risk Operations Center Program ^NEW
- Partner Program
- VAD Partners
- VAR Resellers
- MSP/MSSP Partners
- Integration Partners
- Partner FAQs
- Find Partner
- Company
- About Us
- Our Team
- Investor Relations
- News
- Awards
- Events
- Careers
- SF Unicorns ^NEW
Community
- Community
- Overview
- Discuss
- Blog
- Training
- Docs
- Resources
Login
Contact Us
- Contact Us
- Chat with Us
- Schedule a Demo
- +1800 745 4355
- Request a call or Email
- Global Offices with Contacts
Try Now