Qualys Unit (QLU) – A Flexible Subscription Model

At Qualys, we understand the need for flexibility in choosing the applications that best meet your evolving business requirements. Hence, we offer Qualys Unit (QLU), a flexible subscription model that allows you to re-allocate various applications across the Qualys TotalCloud™ portfolio.  
 
With QLUs, you can purchase a pool of Qualys units and assign them to the Qualys applications based on the resources used. As your needs evolve, you can reallocate QLUs within the TotalCloud™ ecosystem, for example, shifting units from VMs to container nodes during app modernization.

The unused QLUs can be transferred between applications, allowing you to make the most of your subscription without the need for re-licensing.

For example, when you buy a TotalCloud™ license for any of its use cases (CSPM, for example), all other modules, such as KCS, CWPP, CDR, and so on, are automatically enabled in the Qualys Enterprise TruRisk™ Platform. This gives you immediate access without having to request a separate trial from a Qualys Technical Account Manager (TAM). 
 
To use QLUs, you need to convert your license-based subscription into a QLU-based subscription. Contact your administrator or Qualys Technical Account Manager to know more about QLUs and their usage. 

Qualys Apps and the Applicable QLUs

The table below lists the Qualys applications eligible for QLU-based subscriptions, along with the minimum number of QLUs required for each module based on your resource usage. You can purchase QLUs and reassign them across the following TotalCloud™ applications.

Application

Resource 

Number of QLUs 

Cloud Workload Protection (CWP) 

Virtual machine with Cloud Agent 

1 per resource

Virtual machine with FlexScan 

(API-based, Snapshot-based, Network-based, Agent-based) 

2 per resource 

Cloud Security Posture Management (CSPM) 

Virtual Machine CSPM 

8 per resource 

Serverless Function for CSPM 

8 per 100 resources 

Cloud Detection and Response (CDR) 

Virtual Machine protected by CDR 

8 per resource 

Serverless Function protected by CDR 

8 per 100 resources 

Kubernetes and Container Security KCS) 

Virtual Machine with Containers 
(Example, a Kubernetes Node or a Standalone VM running containers)

30 per resource 

Container Image in Registries 

8 per 100 resources 

Serverless Containers 

30 per 15 resources