--- title: Qualys Web Application Scanning (WAS) Data Export and Report Setup Guide slug: rbvm-help/qualys-web-application-scanning-was-data-export-and-report-setup-guide createdAt: 2026-10-26T13:51:24.257Z --- **Summary**: How to export data from Qualys Web Application Scanning (WAS) for ingestion into RiskSense. ## Qualys WAS Overview Qualys Web Application Scanning (WAS) is a cloud-based service that provides automated testing of web applications to identify software vulnerabilities. ## Qualys WAS Setup Log into Qualys WAS with your **username** and **password**. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/g1oC3M-EEx2pfYJJHrq05_qualys-web-application-scanning11.png" alt="Qualys WAS - Login Screen" position="flex-start" size="73" width="509" height="325" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_1.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_1.png" showCaption="false"} Navigate to the **Web Application Scanning** option under **Modules**. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/yiW6ovQ4wdrM5KsbuM4zD_qualys-web-application-scanning12.png" alt="Qualys WAS - WAS Module Location - View" position="flex-start" size="60" width="422" height="864" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_2.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_2.png" showCaption="false"} ### Exporting a WEB\_APPLICATION\_SCAN Once on the **Web Application Scanning** home page, click the **Scans** tab in the navigation bar. ![Qualys WAS - WAS Dashboard - View](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/aghgaoF4sdoHhgO8Ys52Z_qualys-web-application-scanning13.png) On the **Scans** page, click the **New Scan** drop down and select** Vulnerability Scan**. ![Qualys WAS - Vulnerability Scan Location - View](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/b7asm4tmjxI8kJN3cFaSA_qualys-web-application-scanning14.png) In the **Launch New WAS Vulnerability Scan** window, fill in the **Scan Name** and **Web Applications** to scan. ![Qualys WAS - New WAS Vuln Scan - Step 1](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/CIXMAafiOmQOfYHH7G8Hl_qualys-web-application-scanning15.png) For Step 2, complete the fields for **Test Profile**, **Authentication**, and **Scanner Appliance**. ![Qualys WAS - New WAS Vuln Scan - Step 2](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/V_rABzrCe6OEc8yLIZiFD_qualys-web-application-scanning16.png) After reviewing your scanning preferences, select **Finish**. ![Qualys WAS - New WAS Vuln Scan - Step 3](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/pAtW5TkykKA6CHiDmhPwW_qualys-web-application-scanning17.png) The scan status displays **Finished** when completed. ![Qualys WAS - Finished Scan - View](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/8z7dNJcdSWQJdjoLjUFBV_qualys-web-application-scanning18.png) Select the checkbox of the scan that finished and under the **Actions** drop down, select **Download**. ![Qualys WAS - Scan Download Location - View](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/ECuHM2QmazPrGAjXYg2ZU_qualys-web-application-scanning19.png) A **Scan Results Download** pop up will appear and select **Download**. This downloads a WEB\_APPLICATION\_SCAN XML type. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/alTOLzLiV5GLXXBJj1pIG_qualys-web-application-scanning110.png" alt="Qualys WAS - Download Scan Results in Legacy XML" position="flex-start" size="88" width="619" height="307" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_10.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_10.png" showCaption="false"} ### Exporting a WAS\_WEBAPP\_REPORT Once on the **Web Application Scanning** home page, click the **Reports** tab in the navigation bar. ![Qualys WAS - Reports Navigation Menu Location](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/FSvEgccxO8eNqisg0nwAm_qualys-web-application-scanning111.png) On the **Reports** page, click the **New Report** button. ![Qualys WAS - New Report Button](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/IyVOiYvGoYcVvuyYmhHqV_qualys-web-application-scanning112.png) In the **Report Creation** window, choose **Web Application Report** as both the **Report Type** and **Report Template**. Then, select **Continue**. ![Qualys WAS - Report Creation Step 1](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/u-6tVbJITMdDaeIbCeOl5_qualys-web-application-scanning113.png) Step 2 requires selecting the target of your report through including or excluding specific tags or selecting the name of the web application directly. Once the desired web application(s) are chosen, select **Finish**. ![Qualys WAS - Report Creation Step 2](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/24OIJqM_KHZsgXekxx4TO_qualys-web-application-scanning114.png) This action takes you to the **Web Application Report** tab within **Report Management**. Select **Download** from the top-right corner of the page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/-iGdBb4a20snLBYYsO4MI_qualys-web-application-scanning115.png" alt="Qualys WAS - Download Web Application Report" position="flex-start" size="98" width="685" height="160" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_15.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_15.png" showCaption="false"} To save the report, select **Extensible Markup Language (XML)** as the desired format and select the appropriate Timezone. Tags are optional but can be applied to the report. Then, select **Save**. ![Qualys WAS - Save Report - XML](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/9i-kuYVypvRX-UFKtUxyj_qualys-web-application-scanning116.png) After the report is generated, a confirmation snackbar appears at the top of the page and the WAS\_WEBAPP\_REPORT XML type is downloaded automatically. ![Qualys WAS - Snackbar Message](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/_RmpT3W0g0hAT7DVcp1Ju_qualys-web-application-scanning117.png) To download an existing report, select the **Reports** tab within **Report Management** to view all generated reports. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/SAophvTgMx6G5JjOACHp3_qualys-web-application-scanning118.png" alt="Qualys WAS - Download an Existing Report" position="flex-start" size="98" width="687" height="272" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_18.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_18.png" showCaption="false"} ### Exporting a WAS\_SCAN\_REPORT Once on the **Web Application Scanning** home page, click the **Reports** tab in the navigation bar. ![Qualys WAS - Reports Dashboard Location](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/eE2lf_eFJY6zTX-rd9r9g_qualys-web-application-scanning119.png) On the **Reports** page, click the **New Report** button. ![Qualys WAS - New Report Button - Second](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/jnXZ5D85K_QJR8H6x-sdO_qualys-web-application-scanning120.png) In the **Report Creation** pop up, choose **Scan Report** as both the **Report Type **and **Report Template**. ![Qualys WAS - Scan Report](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/ee4fTsobepkg6YSR1igSB_qualys-web-application-scanning121.png) Then, select **Continue**. ![Qualys WAS - Report Creation Continue](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/U0teO7WdOPLSPZ7JRE-fL_qualys-web-application-scanning122.png) Step 2 requires selecting a target of the report. Users can select a Scan or a WebApp. Once a target is selected, click **Finish**. **Scan**: ![Qualys WAS - Select Target of Report](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/YMG1C_JgY_NshV7XfVExW_qualys-web-application-scanning123.png) **WebApp**: ![Qualys WAS - Select Target of Report - WebApp](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/tDvWeNF8w3DDzo-Dg9uaB_qualys-web-application-scanning124.png) This action takes you to the **Scan Report** tab within **Report Management**. Select **Download** from the top-right corner of the page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/yZhGiTF99r7ojnRdZDWND_qualys-web-application-scanning125.png" alt="Qualys WAS - Scan Report - Download Button" position="flex-start" size="98" width="688" height="319" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_25.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Qualys Web Application Scanning_1_25.png" showCaption="false"} To save the report, select **Extensible Markup Language (XML)** as the desired format and select the appropriate Timezone. Tags are optional but can be applied to the report. ![Qualys WAS - Save Scan Report](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/7IqThPs061RCkc5PUonDd_qualys-web-application-scanning126.png) Then, select **Save**. After the report generates, a confirmation snackbar appears at the top of the page and the WAS\_SCAN\_REPORT XML type is downloaded automatically. ![Qualys WAS - Report Generation Snackbar](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/7gm8xun5ACWLt7wkz2oUL_qualys-web-application-scanning127.png)