Building an AppSec Program with Qualys WAS -Introduction and Configuring a Web Application or API: Default Scan Settings

This blog post outlines the default scan settings and best practices for Qualys Web Application Scanning (WAS), including how to use option profiles, choose scanner appliances (external vs. individual), control scan duration, leverage Progressive Scanning to resume large or time-constrained scans, and integrate proxies. It emphasizes starting with default profiles, allowing scans to complete when possible, enabling Progressive Scanning for short windows, and using tags for efficient scanner selection.