ETM Integration with Qualys Applications
Qualys Enterprise TruRisk Management (ETM) integrates with other Qualys applications so that you can see risk across your entire attack surface in one place. Instead of moving between consoles to understand where your risk is, you bring the findings to a single interface, scored and prioritized the same way.
ETM ingests assets and findings from applications such as CyberSecurity Asset Management (CSAM), Policy Audit (PA), Security Configuration Assessment (SCA), Web Application Scanning (WAS), and External Attack Surface Management (EASM). Asset data from CSAM builds a unified inventory that gives you a real-time view of your assets, from cloud to on-premises.
What You Get from an Integration
- One inventory - assets from every connected source are consolidated and deduplicated, so a server is one asset and not four records.
- One risk language - findings arrive with their Qualys Detection Score (QDS), so you can compare a web application vulnerability against a failed configuration control.
- One place to search - use QQL in Risk Management > Findings to filter across sources, or narrow to a single source when you need to.
- Faster remediation - severity, affected asset, detection logic, and remediation guidance sit together on the finding, so you can prioritize without switching interfaces.
Supported Integrations
Select an integration to see its prerequisites, setup steps, and the finding details available in ETM.
| Application | What ETM Ingests | Where to View in ETM | QQL Filter |
|---|---|---|---|
| CyberSecurity Asset Management (CSAM) | Asset inventory and failed postures, as misconfigurations | Findings > Misconfigurations | finding.vendorProductName:'CSAM' |
| Policy Audit / Security Configuration Assessment (PA/SCA) | Failed control postures, as misconfigurations, with MITRE ATT&CK mapping | Findings > Misconfigurations | finding.vendorProductName:PA or finding.vendorProductName:SCA |
| Web Application Scanning (WAS) | Web application vulnerabilities, with exploits, patches, and malware associations | Findings > Vulnerabilities | finding.vendorProductName:WAS |
| External Attack Surface Management (EASM) | Vulnerabilities on internet-facing and previously unknown assets | Findings > Vulnerabilities | finding.vendorProductName:EASM |
How the Integrations Work
Every integration follows the same pattern, so once you have set up one, the rest will feel familiar.
- Enable the application for your subscription. Contact your Technical Account Manager (TAM) or Qualys Support.
- Bring in the data. Run a baseline to ingest existing data for CSAM, PA/SCA, and EASM. For WAS, create a CSV connector and run a scan.
- Work the findings in ETM. Go to Risk Management > Findings, filter by source, and open View Details from the Quick Actions menu to see the summary, QDS breakdown, detection details, and source records.
After the baseline, ETM keeps the data synchronized so that the risk you see reflects your current security posture.
Before You Begin
- The source application must be enabled for your subscription. For EASM, either CSAM or EASM must be enabled.
- For PA/SCA, you need PCAS 1.2.3 or later and Enterprise TruRisk platform 10.32.1.0 or later. Check your versions before you start.
- Your role needs access to the Risk Management module in ETM to view the ingested findings.