Get Started with Custom Assessment and Remediation

The CAR module is a powerful solution designed to automate script execution across your assets. It provides a centralized framework for creating, managing, and executing scripts on Windows and Linux platforms.

Role-Based Access Control (RBAC) in CAR

You must have the user roles defined to get started with CAR. Not all users have access to execute all the operations; hence, user segregation is a better way to streamline the process of script execution in your environment.

CAR uses RBAC permissions that control access to various functions.

To know more about the predefined roles in Qualys CAR, refer to Required Roles and Permissions for CAR.

CAR Licensing

We provide a Free license type for CAR to help you understand CAR and its features. This license is automatically activated for our new customers. With the free license type for CAR, you can access only Home and Library. For an enriched experience, you can choose a Trial license plan. This trial license plan lets you access all features of CAR for 30 days. 

CAR features are available based on different license types. The table below provides the features you can access with each type of license. 

Policy Audit (PA) is an enhanced version of Policy Compliance (PC). Depending on your subscription, you may view Policy Audit (PA) or Policy Compliance (PC) in your application.

License Type Available CAR Features

Eliminate

  • Create all types of scripts except Custom QIDs
  • All scripts in the library are available to view and import, except the script contents in the Policy Audit Fix/PC Remediation category

Policy Audit/Policy Compliance

  • Create Custom QIDs and Custom Scripts
  • View all scripts in the library except the script contents

Policy Audit/Policy Compliance and Policy Audit Fix/PC Remediation

  • Create all types of scripts
  • PC Remediation/Policy Audit Fix Category scripts are available to view script content and import

Security Configuration Assessment (SCA) with Policy Audit Fix/PC Remediation

  • Create control ID remediation scripts
  • Policy Audit Fix/PC Remediation category scripts are available to view script content and import

File Integrity monitoring

  • Create custom scripts
  • View all scripts in the library except the script contents

Supported Script Types in CAR

Qualys CAR supports script creation on both Linux and Windows platforms. The currently supported script types include:

Platforms

Script Types

Linux

LUA, PERL, Python, Shell

Windows

PowerShell Command, PowerShell Script, Python, VBScript

VBScripts are run in batch mode. 

Unix

LUA, PERL, Python, Shell

MAC

LUA, PERL, Python, Shell

Related Topics

Role-Based Access Control

Prerequisites for CAR

Supported Platforms

Supported Scripting Languages