Qualys Web Application Scanning
by Qualys
Cloud scanner that finds web application and API vulnerabilities using fault injection tests.
About
Cloud scanner that finds web application and API vulnerabilities using fault injection tests.
Qualys Web Application Scanning is an automated scanner that assesses, tracks and remediates web application vulnerabilities. It inserts specially crafted strings into form fields and examines application responses, separating exploitable fault-injection problems from simple information disclosure.
It scans SOAP web services and Swagger-based REST APIs, supports Postman collections, and offers a Jenkins plugin for CI/CD scanning. Scans can be distributed across multiple scanners, apps can be grouped with static and dynamic tags, and a unified dashboard brings in data from other Qualys apps. Reports export to HTML, PDF, encrypted PDF, PPT, XML and CSV.
Key features
Product details
Vendor
Qualys
Category
Application & API Security
Starting price
Contact for pricing
Free trial
No
Deployment
Cloud (Qualys Cloud Platform)
Pricing
Similar software
42Crunch
by 42Crunch
API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.
Aikido Security
by Aikido Security
Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.
Akamai API Security
by Akamai Technologies
API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.
Barracuda WAF-as-a-Service
by Barracuda Networks
Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.
Black Duck Polaris
by Black Duck
Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.
Burp Suite Professional
by PortSwigger
Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.