Qualys Data Extraction Guide (for SIM Template)

Qualys aggregates application and asset data through its scanning infrastructure and cloud inventory.
The relevant sources for this export are:

• Global AssetView – Centralized inventory of endpoints and applications.

• Applications / Installed Software View – Lists all detected software, versions, and publishers.

• Qualys API (KnowledgeBase and Host List Detection endpoints) – Enables programmatic access to the same data.

Prerequisites

For Console (UI) Method

• Access to Qualys Cloud Platform → AssetView / Global IT Asset Inventory.

• User role with Read/Download permissions for Inventory and Applications modules.

• Asset data synchronized from recent vulnerability or inventory scans.

For API Method

• Valid Qualys API credentials (username and password or token).

• Network access to the Qualys API endpoint (e.g. https://qualysapi.qualys.com).

• API access enabled in your subscription.

• A working environment with PowerShell, curl, or Postman for REST API requests.

Two methods are supported depending on your access and automation requirements.

Option 1: Qualys AssetView / Global IT Asset Inventory (UI Export)

This is the most straightforward approach for manual exports.

1. Log in to Qualys Cloud Platform.

2. Navigate to Global AssetView → Applications.

3. Use filters to include all desired assets (e.g. all sites or specific tags).

4. Click Export → CSV.

5. Choose the fields:

   • Host Name / Asset Name

   • Software Name

   • Version

   • Vendor

6. Save the file as Qualys_SIM_Export.csv.

Note: Depending on your module setup, this data may appear under Inventory → Applications or Software views.

Option 2: Qualys API (Recommended for Automation)

The Qualys API provides a scalable way to extract application inventory data across multiple endpoints.

Step 1: Retrieve Host List and Application Data

Use the Host List Detection API, which includes installed software and version information.

Example PowerShell Script

# Qualys SIM Template Export Script
# Requires Qualys API credentials and access rights

$QualysUrl = "https://qualysapi.qualys.com"
$Username = "api_user"
$Password = "api_password"
$ExportPath = "C:\Exports\Qualys_SIM_Export.csv"

# Basic Auth header
$EncodedAuth = [Convert]::ToBase64String([Text.Encoding]::ASCII.GetBytes("$Username`:$Password"))
$Headers = @{ "Authorization" = "Basic $EncodedAuth" }

# Request installed software data
$Response = Invoke-RestMethod -Uri "$QualysUrl/api/2.0/fo/asset/host/vm/detection/?action=list&show_software=1" -Headers $Headers -Method Get

# Parse XML response
$ExportData = @()
foreach ($Host in $Response.HOST_LIST.HOST) {
    $DeviceName = $Host.NETBIOS_NAME
    foreach ($App in $Host.SOFTWARE_LIST.SOFTWARE) {
        $ExportData += [PSCustomObject]@{
            "Device Name"        = $DeviceName
            "Software Name"      = $App.NAME
            "Software Version"   = $App.VERSION
            "Software Publisher" = $App.VENDOR
        }
    }
}

# Export to CSV
$ExportData | Export-Csv -Path $ExportPath -NoTypeInformation -Encoding UTF8
Write-Host "Export complete: $ExportPath"

This script connects to Qualys, queries all scanned hosts, extracts their software lists, and exports the result to CSV in the format required for the Licenseware SIM Template.

Exporting to CSV

• UI Method: Use the Export → CSV option directly from the Applications view.

• API Method: The PowerShell script will automatically generate Qualys_SIM_Export.csv.

Ensure the CSV headers match:

Preparing for SIM Import

1. Open the Licenseware SIM Template.

2. Go to the Software Inventory tab.

3. Paste  the CSV data into the template

Remove blank or extraneous rows before saving.

👉 Learn more here

Troubleshooting

Example Output

Device Name,Software Name,Software Version,Software Publisher
LAPTOP-001,Google Chrome,129.0.6668.90,Google LLC
SERVER-02,Microsoft SQL Server 2022,16.0.432,Microsoft Corporation
LAPTOP-004,Slack,4.39.95,Slack Technologies
SERVER-05,Adobe Acrobat DC,24.002.20933,Adobe Inc.