Hands-on playbook · 50 min
Qualys Playbook: Platform URLs, Token Auth, Detection APIs That Page Correctly, QQL and Cloud Agent at Scale
A hands-on Qualys guide checked against Qualys's own documentation: find your platform's API server, authenticate with client credentials, pull detections with the XML and new JSON APIs without silently losing hosts, respect API limits, write QQL that matches what you mean, and roll out Cloud Agent safely.
- Find your platform from your username, and know API server versus gateway URLs
- Client-credential JWTs that expire in four hours, and how long jobs should refresh
- Detection API paging with WARNING 1980, tested in code, so no host is dropped
- The new JSON detection API: requestId paging, 12-month windows, page sizes
- API version end-of-life dates you must migrate before, and 409 limit handling
- QQL rules that change results, including where NOT does not work
- Cloud Agent install, connectivity checks and a 90-day rollout
- 01Under the hood
- 02Hands-on lab
- 03Recipes
- 04Rollout runbook
- 05Troubleshooting
- 06Interview drill
- 07Sources
Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, hands-on tool playbooks, the complete practice-test bank, and the downloadable security field guides.
6 months · One payment · No auto-renewal
An independent playbook for interview preparation and learning. AISecurityInterviews is not affiliated with or endorsed by Qualys, and product names are trademarks of their owners. Use these procedures only on systems you own or are authorised to test, and check the vendor's documentation before changing production.