Founded in 1999 and based in Foster City, California, Qualys provides cloud security, compliance and related services. The company specializes in vulnerability management solutions as applications through the web using a "software as a service" (SaaS) model. As part of its service offering Qualys maintains extensive records about vulnerability types and makes these available to its customers through it software applications.


VRMT relies on XML files as a source of vulnerability information. Though any type of XML file will do, many companies have already deployed Qualys as their vulnerability scanning engine which produces specifically structured XML types. Due to this fact we will pledge a bit more attention to Qualys XML source files throughout this manual.


The following information is gathered from Qualys Support pages. The individual sources have been listed on the Resources page.


updated on: 5/9/2019 ⏐updated by: Wolfgang Stoettner ⏐ v1.0.1