Web App Scanning (WAS) by Qualys is a comprehensive web application security scanning solution that performs automated end-to-end crawling and testing in CI/CD environments with shift-left DAST (Dynamic Application Security Testing) capabilities. The solution detects runtime vulnerabilities, OWASP Top 10 risks, OWASP API Top 10 issues, misconfigurations, PII exposures, sensitive data exposures, web malware, compliance issues, and deviations from OpenAPI (OAS v3) specifications across perimeter, internal networks, remote devices, mobile systems, cloud-native and on-premises architectures, API gateways, containers, and microservices. It reduces attack surface and risk for modern web applications and APIs through continuous monitoring and smart progressive scanning techniques, while integrating into DevOps, Agile, and Continuous Delivery processes to identify security issues throughout development, QA phases, and production environments.
