View InstaScan Findings
Use the InstaScan tab to see the newest findings that InstaScan detects on your assets, as soon as they arrive. You can act on new exposures before processing is complete.
Navigate to: Risk Management > Findings > InstaScan
Prerequisites
- This feature is available on request. To turn it on, contact Qualys Support or your Technical Account Manager (TAM).
- Your account has a Unified Asset Inventory (UAI) subscription.
- InstaScan is enabled for your account. The InstaScan tab appears only when InstaScan is enabled.
How the InstaScan Tab Works
The InstaScan tab is next to the Vulnerabilities tab. It lists the findings that InstaScan detects on your assets, with the newest findings first.
InstaScan findings stay on this tab for about 24 hours. They then move to the Vulnerabilities tab automatically, where you work with them like any other finding. A banner with the InstaScan icon at the top of the tab reminds you of this.
Use the InstaScan tab when a new vulnerability is in the news and you want to know right away whether it affects your assets.
Columns
| Column | Description |
|---|---|
| Title | Displays the vulnerability or finding name along with its associated CVE identifier. |
| Technology | Identifies the affected software, technology, or product version associated with the finding. |
| Severity | Indicates the risk level of the finding based on its potential impact. |
| CVSS Score | Shows the Common Vulnerability Scoring System (CVSS) score used to assess vulnerability severity. |
| Lifecycle | Displays the finding status and key lifecycle information, such as when it was first detected. |
| Impacted Asset | Lists the asset affected by the finding, including the asset name and identifier. |
If a value is too long to fit in a column, hover over it to see the full value.
Search, Group, and Filter Findings
- Search: Use the single search bar to search with both finding tokens and asset tokens, such as the asset tag name. For the tokens, refer to Search Tokens for Findings.
- Group By: Group the findings by vendor name or severity. Click a count to see the matching findings.
- Quick Filters: Narrow the list by Technology, Tags, and Severity. The Total Vulnerabilities count at the top of the quick filters shows the number of findings on the tab.
InstaScan converts the severity from the vendor advisory to the Qualys 1–5 scale:
| Vendor severity text | InstaScan level |
|---|---|
| Informational, Info | 1 |
| Low | 2 |
| Medium, Moderate, None, Unspecified, or any other value | 3 |
| High, Important | 4 |
| Critical, Urgent | 5 |
| No severity given | 0 |
Finding titles are not clickable on the InstaScan tab. To see the full finding details, open the finding on the Vulnerabilities tab after it moves there.