Qualys Flow Release 1.21

March 10, 2026

With this release of QFlow, we are introducing the following new features and enhancements.

Mark Evaluation as Failed When No Resource Found (Azure – TotalCloud Node)

You can now configure the TotalCloud node to mark an evaluation as Failed when no resources are detected.

Previously, when TotalCloud evaluated a control and no results were returned, the control state was set to Not Applicable (NA). This behavior could lead to false negatives in scenarios where encryption or other mandatory configurations are expected but absent.

We have introduced a new checkbox option:

Mark failed when no resource found

When this option is selected:

• The control evaluation is marked as Failed if no resources are detected.
• The Account ID is passed to TotalCloud for evaluation.
• The control displays Pass/Fail status against the associated Account ID.

This enhancement aligns TotalCloud evaluation behavior with Policy Compliance, so that missing required configurations result in a failure rather than NA.

Improved Default Case Handling in Decision Nodes

We have improved the behavior when changing the Default Case in a decision node.

Previously, modifying the default case deleted the existing default case configuration. This action removed any workflows created under that case.

With this release:

• Switching the default case no longer deletes the existing configuration.
• Users can seamlessly switch between cases without losing associated workflows.

This enhancement prevents unintended workflow loss and improves usability when modifying decision logic.

Sensitive Credentials Excluded from Workflow Export

Sensitive credentials are now excluded by default when exporting a workflow to JSON.

When exporting a QFlow:

• The generated JSON file excludes sensitive credential information.
• This ensures secure handling of exported workflow configurations.

This improvement enhances security by preventing unintended exposure of sensitive authentication data during workflow export.