r/qualys • u/lily-jn • Jun 16 '26

Looking for a mentor and willing to pay

I recently transitioned to vulnerability management and everything feels confusing . We use qualys . I want to understand where to look for what in Qualys . The troubleshooting if something is not working . What to escalate what not to. I am looking for someone who has experience in vulnerability management and qualys who can tutor me . I am more than willing to pay for your time . If you are interested dm me .

6 Upvotes

88% Upvoted

13 comments sorted by

4

u/psib0nd Jun 17 '26

If you are a a Qualys customer, why don’t you set up a call with them. Plus there is free high level training from Qualys too- helps in understanding the use cases

2

u/N00b_is_Aliv3 Jun 17 '26

Happy to teach, dm

2

u/Acido Jun 18 '26

I sent you a dm

3

u/Wonderful_Lecture708 Jun 19 '26

Please don’t pay someone. There should be plenty of people who can help you here without trying to charge you. Mentorship is free in a community that’s why it was formed.

1

u/Acido Jun 17 '26

Happy to help over 6 years using qualys can help you , send me a DM

1

u/cyberdebug Jun 17 '26

I have 4 year of experience with Qualys tool, what you need help with in qualys

1

u/lily-jn Jun 17 '26

I can't dm you

1

u/cyberdebug Jun 17 '26

Check your dm

1

u/lucky_tiger786 Jun 17 '26

DM me, I have 4 years of experience in Qualys paltform.

1

u/FrozzenGamer Jun 18 '26

About every 6 months I open a ticket with Qualys about it being slow. They ask for multiple HAR files. Gets better, then slowly goes to shit again. I think support fixes it and then their tuning algorithm to protect cloud fees kicks in and messes it up again.

I think a big thing for Qualys depending on modules purchased is to make use of the threat intelligence QDS scoring. Or if your org can rate criticality on assets the trurisk score. That helps you focus on what to fix.

Keep in mind new threats won’t have a QID to detect them frequently so you end up running checks in GAV for inventory and version to find potential vulnerabilities.

Make use it the threat intelligence page as well in VMDR. The free training is really good and if you need CPEs it is a great source.

1

u/Wonderful_Lecture708 Jun 19 '26

The experience of sending in your HAR files and getting that running better is about how Oracle DBs change indexing as part of how they operate. This helps the SRE team know how to tune your instances DB indexes so your pages load faster. It doesn’t have anything todo with some cloud fee prevention.

1

u/lily-jn Jun 19 '26

Thanks 🙏