SaaS Detection and Response Release 1.15.0 

June 29, 2026

SCuBAGear Framework Support  Microsoft 365 Security Assessment

Added support for assessing Microsoft 365 environments against the SCuBAGear framework. You can now assess Microsoft 365 environments against the SCuBAGear framework to identify security misconfigurations and validate compliance with CISA SCuBA baselines, improve cloud security posture, and provide actionable recommendations for secure configuration and continuous monitoring.

We have added support for the following SCuBAGear policies:

  • SCuBA Security Baseline for Microsoft Entra ID    
  • SCuBA Security Baseline for Microsoft Defender    
  • SCuBA Security Baseline for Microsoft Exchange Online    
  • SCuBA Security Baseline for Microsoft SharePoint Online and OneDrive  
  • SCuBA Security Baseline for Microsoft Teams    

FedRAMP High Compliance Support

The Qualys SaaSDR application introduces support for FedRAMP High-compliant deployments, enabling operation in U.S. federal and highly regulated environments. As an add-on to TotalCloud, this capability allows you to meet government security and communication requirements without requiring separate builds or configurations. 

With FedRAMP High compliance, all SaaSDR communications operate over encrypted channels with SSL-based authentication. 

Benefits

  • Secure communication across all dependent services

  • Alignment with government security requirements


This feature is available only for the FedRAMP HIGH Cloud Platform (https://qualysguard.gov1.qualys.us) to ensure the highest level of data security practices are being adopted. All existing SaaSDR functionalities are supported for FedRAMP High.
To enable FedRAMP support, connect to your Technical Account Manager or contact Qualys Support

For more details on FedRAMP High, see  Qualys Government Platform | FedRAMP Marketplace.

CSV Export Limit Enhancements

Previously, CSV exports were limited to 10,000 records. You can now export up to 100,000 records, and validation messages clearly indicate the maximum allowed limit.

Also, you can now export up to 100,000 User, Group, and Resource records in a single CSV file.