Skip to content
Qualys API connector.
Branch: master
Clone or download
Latest commit 2c8bf1d Mar 14, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information.
reqs merge original qualysapi Feb 6, 2019
tests merge original qualysapi Feb 6, 2019
.travis.yml merge original qualysapi Feb 6, 2019
Makefile merge original qualysapi Feb 6, 2019
changelog.txt Removed NTLM -- duh. Oct 26, 2013
license Update license Mar 6, 2017
setup.cfg deleted comment Feb 8, 2019


Build Status Coverage Status

Python package, qualysapi, that makes calling any Qualys API very simple. Qualys API versions v1, v2, & WAS & AM (asset management) are all supported.

My focus was making the API super easy to use. The only parameters the user needs to provide is the call, and data (optional). It automates the following:

  • Automatically identifies API version through the call requested.
  • Automatically identifies url from the above step.
  • Automatically identifies http method as POST or GET for the request per Qualys documentation.


Check out the example scripts in the /examples directory.


Detailed example found at

Sample example below.

>>> import qualysapi
>>> a = qualysapi.connect()
QualysGuard Username: my_username
QualysGuard Password: 
>>> print a.request('about.php')
<?xml version="1.0" encoding="UTF-8" ?>
<!-- Generated for username="my_username" date="2013-07-03T10:31:57Z" -->
<!-- CONFIDENTIAL AND PROPRIETARY INFORMATION. Qualys provides the QualysGuard Service "As Is," without any warranty of any kind. Qualys makes no warranty that the information contained in this report is complete or error-free. Copyright 2013, Qualys, Inc. //--> 


Use pip to install:

pip install qualysapi

NOTE: If you would like to experiment without installing globally, look into 'virtualenv'.


Tested successfully on Python 2.7.


By default, the package will ask at the command prompt for username and password. By default, the package connects to the Qualys documented host (

You can override these settings and prevent yourself from typing credentials by doing any of the following:

  1. By running the following Python, qualysapi.connect(remember_me=True). This automatically generates a .qcrc file in your current working directory, scoping the configuration to that directory.
  2. By running the following Python, qualysapi.connect(remember_me_always=True). This automatically generates a .qcrc file in your home directory, scoping the configuratoin to all calls to qualysapi, regardless of the directory.
  3. By creating a file called '.qcrc' (for Windows, the default filename is 'config.ini') in your home directory or directory of the Python script.
  4. This supports multiple configuration files. Just add the filename in your call to qualysapi.connect('config.txt').

Example config file

; Note, it should be possible to omit any of these entries.

hostname =
username = jerry
password = I<3Elaine

# Set the maximum number of retries each connection should attempt. Note, this applies only to failed connections and timeouts, never to requests where the server returns a response.
max_retries = 10

; This section is optional. Leave it out if you're not using a proxy.
; You can use environmental variables as well:

; proxy_protocol set to https, if not specified.
proxy_url =

; proxy_port will override any port specified in proxy_url
proxy_port = 8080

; proxy authentication
proxy_username = kramer
proxy_password = giddy up!


Apache License, Version 2.0


Special thank you to Colin Bell for qualysconnect.

You can’t perform that action at this time.