Learn the core features of Qualys Web Application Scanning as well as best practices to effectively build a web application security program for your organization.
For the best experience, Qualys recommends the certified Web Application Scanning course: self-paced or instructor-led.
To learn the individual topics in this course, watch the videos below.
Qualys Web Application Scanning
February 9, 2018
Get an introduction to Qualys Web Application Scanning. Compare fault injection vs manual testing. Understand the Qualys WAS Lifecycle:...
KnowledgeBase & Search Lists
February 22, 2018
Understand the Qualys Web Application Scanning KnowlegeBase and Search Lists. Get the parts of a QID: Name, icons, type, severity. View...
Defining an Application
February 22, 2018
Define an Application in Qualys Web Application Scanning. Understand the Qualys definition of a Website: Unique business processes, Different...
Crawl Scope
February 22, 2018
Define the crawl scope for scanning a web app. Understand the Crawl Scope options: Limit to URL hostname, Limit to content located at or...
Basic Setup and Scanning
March 19, 2018
Basic web application setup and scanning. Add Applications to your subscription. Enter the URL of your application. Scan your web...
Sitemap
March 16, 2018
View Sitemap findings. Show links crawled and vulnerabilities detected. Create new web applications from your sitemap. Add links to blacklist...
Option Profile
August 14, 2017
Configure the Option Profile in Qualys WAS. Apply tags to Option Profiles. Configure Form Submission: Post & Get. Define maximum links to...
Progressive Scanning
February 27, 2018
Configure Progressive Scanning. Understand the difference between Progressive Scanning and Traditional Scanning. Scan large applications....
DNS Override
February 27, 2018
Configure and scan with DNS Override.
Authenticated Scanning
April 13, 2018
Configure Authenticated Scanning in Qualys Web Application Scanning. Create authentication records with standard login form records, custom...
Crawl Exclusion Lists
February 27, 2018
Configure Crawl Exclusions lists. Configure White Lists, Black lists, POST Data Black List, and Logout Regular Expression. Use regular...
Vulnerability Scanning and Testing
February 28, 2018
See how Qualys performs web application vulnerability testing. Launch a web application vulnerability scan. Use Asset Tags as scan targets....
Dashboard and Catalog
February 22, 2018
View the WAS dashboard.along with vulnerability details. Create customized dashboards. View the WAS catalog. Mark applications as New, Rogue,...
Web Application Report and Template
February 22, 2018
Build a Web Application Report. View vulnerability details. Ignore vulnerability findings. Edit a web application report. Understand the...
Scan Report
February 22, 2018
Create a scan report. View vulnerability details. View scan details. Edit a scan report. Creating a report template.
Asset Tagging
March 16, 2018
Create an asset tag. Nest asset tags. Understand static vs dynamic tags. Assign tags to web applications. Filter applications using tags....
User Creation and Scope
March 16, 2018
Configure User accounts and User Roles. Assign the user role to the user account to grant WAS permissions. Assign tags to web applications....
Third Party Integration
August 13, 2018
Burp Suite Integration, Malware Detection & Web Application Firewall in Qualys Web Application Scanning. Import a Burp XML file. View Burp...