New Scheduling and Reporting Services for WAS and TotalAppSec
Overview
Qualys Web Application Scanning (WAS) and TotalAppSec are getting upgraded scheduling and reporting. Over the last three months, select customers have already moved to the new experience and are seeing the benefits. We are now rolling this out to all WAS and TotalAppSec subscriptions.
You get better reliability, new scheduling options, and improved reporting. Your existing schedules and reports carry over automatically with no downtime and no data loss.
Rollout Timeline
Your subscription will be upgraded automatically. Here is the month by month plan:
| Month | What Happens |
|---|---|
| Late April 2026 | Scheduled scans upgrade begins rolling out |
| May 2026 | Scheduled scans upgrade completes for all platforms |
| Late May 2026 | Reporting service upgrade begins rolling out |
| June 2026 | Reporting service upgrade completes for all platforms |
| Mid June 2026 | Scheduled reports upgrade begins rolling out |
| July 2026 | Scheduled reports upgrade completes for all platforms. Green Window scheduling available for TotalAppSec customers. |
Watch the Qualys Status Page for updates on your specific platform.
What is Changing
The way your scheduled scans and reports run behind the scenes is being upgraded:
- Scheduling is getting more reliable with new options for controlling when and how your scans run
- Reporting is getting faster with support for new report types and templates
Nothing changes in how you use WAS or TotalAppSec day to day. The same UI, the same APIs, the same workflows. You just get more options and better reliability.
What You Get
For All WAS and TotalAppSec Customers
More reliable scheduling
Better handling of timezone changes, daylight saving transitions, and edge cases.
Distribution groups
Organize who gets notified for scan completions and report deliveries.
Additional email recipients
Add recipients for report delivery beyond your subscription users.
OWASP API report templates
New report templates for API security coverage.
V4 API support
Full V4 public API for creating and managing schedules and reports.
Launch Now default
“Launch Now” is checked by default when creating new schedules.
TotalAppSec Only
Schedule scans for APIs
Schedule recurring compliance and vulnerability scans for your API collections.
Retest webapps on a schedule
Set up recurring retests directly from the webapp view and quick actions menu.
Smarter scan controls
AI powered scan optimization, scan time limits, reauthentication handling, and crawling behavior settings.
Progressive scan reset
Restart scan progression counters within scheduled scans.
Green Window scheduling
Define specific hours and days when scans are allowed to run. Use presets like business hours, overnight, or weekends. Scans pause outside the window and continue in the next one. Requires progressive scanning.
What You Need to Do
Qualys handles everything. You do not need to request it or configure anything. Once your subscription is upgraded:
- Refresh your browser or log out and log back in to see the new features
- Review your existing schedules to make sure everything carried over as expected
If you had schedules set to run indefinitely (no end date), those have been set to 360 days. You can update the end date to your preference.
Known Limitations
| Area | Details |
|---|---|
| Infinite schedule duration | Schedules with no end date are set to 360 days. You can update the end date to your preference. |
| High detection count | Subscriptions with a very high number of detections per report may be upgraded on a different timeline. Qualys Support will work with you if this applies. |
Frequently Asked Questions
Will my existing schedules stop working during the upgrade?
No. The upgrade waits for a safe window when none of your schedules are running. No schedules are skipped or interrupted.
Do I need to recreate my schedules?
No. All existing schedules carry over automatically with the same settings, timing, and targets.
Will my scan results or report history be affected?
No. Historical scan results and reports are not affected.
How do I know if my subscription has been upgraded?
You will see new options in the scheduling interface such as distribution groups, additional recipients, and (for TotalAppSec) API scan scheduling and retest webapp scheduling. If you see these options, your subscription is on the new experience.
Is there any downtime?
No. Everything happens in the background with no downtime or service interruption.
What if something looks wrong after the upgrade?
Contact Qualys Support. Any issues can be verified and resolved quickly.
Does this affect my API integrations?
Existing V3 API endpoints continue to work as before. You also get access to new V4 API endpoints for schedule and report management. No changes are needed to your existing integrations.
I am on WAS, not TotalAppSec. Does this apply to me?
Yes. Phases 1 through 3 (reporting upgrade, scheduled scans, scheduled reports) apply to both WAS and TotalAppSec. Phase 4 (Green Window) is TotalAppSec only.
Related
For questions, issues or assistance, contact Qualys Tech Support.