Connector Centralization 3.3.0

Support for New Connectors

Aqua Security

The Aqua connector imports cloud assets and security findings from Aqua Security into the Qualys Enterprise TruRisk™ Platform (ETM). Once ingested, these assets and findings are available alongside data from other configured sources, allowing ETM to correlate and display exposure information across cloud and application environments in a unified view.
Aqua Security Online Help

Qualys Dataflow for TotalAppSec (TAS)

The Qualys TotalAppSec (TAS) connector imports web application and API assets, along with their associated vulnerability findings, from TAS into the Qualys Enterprise TruRisk™ Platform (ETM). Once ingested, these assets and findings are available within ETM alongside data from other connected sources, allowing them to be included in asset inventory, risk scoring, and exposure analysis workflows.
Qualys Dataflow for TotalAppSec (TAS)

JFrog Artifactory & Xray

This connector enables integration between JFrog Artifactory and JFrog Xray solutions with Qualys Enterprise TruRisk Management (ETM) platform. It imports repository, container images and vulnerability findings from JFrog into ETM, and makes the data available for risk correlation and prioritization using ETM's TruRisk scoring model.
JFrog Artifactory & Xray Online Help

Amazon Inspector v2

This connector enables integration between Amazon Inspector and the Qualys Enterprise TruRisk Management (ETM) platform. It pulls vulnerability findings and associated asset data from Amazon Inspector and ingests them into Qualys ETM, making that data available for risk analysis and asset visibility alongside other sources within the platform.
Amazon Inspector v2 Online Help

Okta

The Okta connector integrates identity data from Okta's Universal Directory into the Qualys Enterprise TruRisk™ Platform (ETM), importing users, groups, roles as identity assets into the Qualys ETM and Qualys ETM Identity. Once synchronized, these assets can be correlated with other security data across your environment, giving security teams visibility into access relationships and potential identity-related risks.
Okta Online Help 

Atlassian Jira Cloud

The Atlassian Jira Connector integrates Qualys applications with Jira Cloud, allowing automated ticket creation, updates, and workflow transitions for findings generated by Qualys.
Atlassian Jira Connector Online Help

Enhancements to Existing Connectors

The following connectors are enhanced with extended asset and misconfiguration support.

Palo Alto Networks Prisma Cloud (CSPM / Twistlock)

• Added support for additional asset classes and finding types.
  • • Azure VM – Inventory and Misconfiguration and Vulnerability using both CSPM and Twistlock API
    • Azure VMSS - Inventory and Misconfiguration
    • Azure VMSS VM - Inventory and Misconfiguration and Vulnerability using Twistlock API
    • Azure Serverless - Inventory and Misconfiguration
    • Azure Registry Image – Inventory and vulnerability using Twistlock API

Wiz (Cloud Security)

• Added support for additional asset classes
  • AWS EC2 misconfiguration
  • Azure VM misconfiguration
  • GCP compute engine misconfiguration
  • OCI compute instance misconfiguration
  • AWS lambda misconfiguration
  • Google cloud function misconfiguration
  • AWS elastic container instance misconfiguration
  • AWS S3 misconfiguration
  • GCP bucket misconfiguration
  • Azure storage account misconfiguration
  • OCI object storage misconfiguration

Microsoft Defender for Cloud
Added misconfiguration support for the following asset classes:

• Azure Container Instance
• Azure Compute Virtual Machine
• Azure Serverless (Azure Functions)

CrowdStrike Falcon Cloud Security
Added support for additional asset classes with inventory or vulnerability coverage for:

• Azure VM
• GCP compute engine
• OCI compute instance (inventory and vulnerability)
• OCI container image (inventory and vulnerability)
• OCI functions and container instances (inventory)

Orca Security (Cloud Security)
Added support for additional asset classes with inventory and vulnerability coverage, including:

• OCI.VM_INSTANCE
• ASSET.SERVERLESS.AZURE.FUNCTION_APP
• AzureAcrImage

Cortex XDR
Added support for vulnerability ingestion. With this enhancement, the Cortex XDR connector can now ingest both assets and vulnerabilities into Qualys ETM.

Qualys Dataflow for Container Security
Added support for Assets Only ingestion. With this enhancement, the connector can now be used to ingest:

• Assets only, or
• Assets and vulnerabilities into Qualys ETM

BitSight
Enhanced the UI profile page with a Grade filter, implemented as a multi-select combo box. This allows users to select one or more grade values to filter ingested data more effectively.