{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"qualys","name":"Qualys","domain":"qualys.com","category":"Compliance and GRC","one_liner":"Qualys, Inc. is an American technology firm based in Foster City, California, specializing in cloud security, compliance and related","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/qualys/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2016-11-02","expires_at":null,"period_start":null,"period_end":null,"auditor":"Coalfire Systems, Inc.","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/qualys/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1508207205","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Qualys - Qualys Cloud Platform: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1508207205","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Qualys - Qualys Cloud Platform: FedRAMP Authorized","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"third_party","state_label":"Reported","sentence":"Reported by the CSA STAR registry as of 17 Sep 2026, not confirmed.","kind":"certificate","status_text":"CSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification","issued_at":"2019-05-19","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/qualys/iso-27001","evidence":[{"source_type":"registry","source_name":"CSA STAR registry (Level 2 basis)","url":"https://cloudsecurityalliance.org/star/registry/qualys-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"qualys, inc: STAR Level 2 certification, Trusted Cloud Provider","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"level2","status_text":"STAR Level 2 certification, Trusted Cloud Provider","issued_at":"2019-05-19","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/qualys/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/qualys-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"qualys, inc: STAR Level 2 certification, Trusted Cloud Provider","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: SW-US Certification, EU-US Certification, UK Extension Certification","issued_at":"2016-11-14","expires_at":"2027-05-04","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/qualys/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4982","fetched_at":"2026-09-17 15:48:45.9921+00","content_hash":"5085ae28313169ce1b7ed1ceea7b4e50222b16dcba0c318187206b2813d68dd6","wayback_url":null,"quote":"Qualys Inc: Active: SW-US Certification, EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Qualys is listed in the FedRAMP registry as FedRAMP Authorized since 02 Nov 2016, with the assessment conducted by Coalfire Systems, Inc. As of 17 Sep 2026, Qualys is listed in the CSA STAR registry with a STAR Level 2 certification and Trusted Cloud Provider status, issued 19 May 2019, which the registry notes is built on an ISO/IEC 27001 certification. As of 17 Sep 2026, no public evidence found for ISO/IEC 27001 as a directly verified certification separate from the CSA STAR registry entry. As of 17 Sep 2026, Qualys is listed in the EU-US Data Privacy Framework registry as active, covering SW-US, EU-US, and UK Extension Certifications, issued 14 Nov 2016 and expiring 04 May 2027. As of 17 Sep 2026, no public evidence found for SOC 2 or HIPAA compliance for Qualys in the supplied evidence rows.","bullets":["FedRAMP: listed in fedramp registry as FedRAMP Authorized since 02 Nov 2016, assessed by Coalfire Systems, Inc. (as of 17 Sep 2026)","CSA STAR: listed in csa_star registry with STAR Level 2 certification and Trusted Cloud Provider status since 19 May 2019, noted as built on an ISO/IEC 27001 certification (as of 17 Sep 2026)","EU-US Data Privacy Framework: listed in dpf registry as active (SW-US, EU-US, UK Extension), issued 14 Nov 2016, expires 04 May 2027 (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:36:57.514813+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T03:30:08.331Z"}