Qualys

Name: Qualys
Author: Qualys

GoodBotVerifiedBOT

Qualys Web Application Scanner is a cloud-based service that provides automated crawling and testing of custom web applications to identify vulnerabilities including cross-site scripting (XSS) and SQL injection. Operated by Qualys.

Operator website ↗

GoodBot

Assessment

Security

What is Qualys?

Qualys is a web crawler operated by Qualys. Qualys Web Application Scanner is a cloud-based service that provides automated crawling and testing of custom web applications to identify vulnerabilities including cross-site scripting (XSS) and SQL injection.

Helpful — Verified, safe crawler. Respects robots.txt and provides operator documentation.

Identification

Bot name

Qualys

Operator

Qualys

Why it crawls your site

Qualys crawls websites to scan for security vulnerabilities and potential threats. It is operated by Qualys as part of their security infrastructure. If you see this bot in your server logs, it is a verified crawler and generally safe.

Block or allow Qualys

Block it

Add a Disallow rule for cf-qualys-scanner in your robots.txt file. You can also block at the server level using your web server configuration or CDN firewall rules to filter requests matching the user-agent string.

# Block Qualys from crawling your entire site
User-agent: cf-qualys-scanner
Disallow: /

# Allow Qualys full access
User-agent: cf-qualys-scanner
Allow: /

Allow & verify

Ensure your robots.txt allows cf-qualys-scanner. Verify requests are genuine by checking the user-agent string and referring to Qualys's documentation.