Qualys Flow is a low-code/no-code cloud management platform that can help you to create customized workflows named QFlows within a few clicks.
A QFlow is a logical flow of events, data, and actions to get a specific output like an insight, a compliance check, a report, remediation, or an action. Qualys Flow helps in the automation of the cloud management process. You can build a QFlow using different nodes. Nodes are building blocks of a QFlow. Each node is used to perform a specific function such as collect AWS Inventory, AWS Action, data formatting etc. You can choose the specific node to perform the desired function.
With Qualys Flow, you can create
a runtime custom control for AWS in the CloudView application.
automation (QFlows) to achieve specific/use case-based requirements without the knowledge of scripts.
a Security Orchestration Automation and Response (SOAR) playbook with QFlow.
For example, the resource node decides which data should be fetched for modification; the action node decides the action that should be taken on selected data.
You can access the Qualys Flow application if you have CloudView (Cloud Security Assessment) and VMDR applications enabled for you.
Each user has a predefined role that determines the actions they can perform. The Manager user has full privileges and permissions to create, execute, deploy, and delete the QFlows. The Manager user can grant permissions or roles to the sub-users based on the requirement.
|
Role User |
Permissions |
|
Qualys Flow Admin |
Create, edit, execute, delete, or deploy all the QFlows List, read, assign tags, or remove tags for all the QFlows available in the account |
|
Power Developer |
Create, edit, execute, delete, or deploy their own QFlows List, read, assign tags, and remove tags for their own QFlows |
|
Developer |
Create, edit, execute, or delete their own QFlows List, read, assign tags, or remove tags for their own QFlows |
|
Deployer |
List, read, execute, or deploy all the QFlows by using tags assigned by the Manager user |
|
Reader |
List and read all the QFlows by using tags assigned by the Manager user |
Using Qualys Flow, you can create QFlows in two ways:
Additionally you can use your QFlow in the CloudView application to create controls and build your own policy.