Qualys Integration

Qualys Integration with TigerTrust

TigerTrust integrates with Qualys SSL Labs for comprehensive SSL/TLS security assessment.

SSL Labs Integration

Configure SSL Labs scanning:

qualys:
  ssl_labs:
    enabled: true
    scan_interval: weekly

    domains:
      - api.example.com
      - www.example.com
      - app.example.com

    thresholds:
      minimum_grade: A
      alert_on_downgrade: true

Grade Monitoring

Track SSL Labs grades:

{
  "domain": "api.example.com",
  "grade": "A+",
  "grade_trust_ignored": "A+",
  "has_warnings": false,
  "is_exceptional": true,
  "details": {
    "certificate": {
      "grade": "100",
      "issues": []
    },
    "protocol_support": {
      "grade": "100",
      "protocols": ["TLSv1.2", "TLSv1.3"]
    },
    "key_exchange": {
      "grade": "90",
      "algorithms": ["ECDHE"]
    },
    "cipher_strength": {
      "grade": "90",
      "weak_ciphers": false
    }
  }
}

Vulnerability Detection

Detect SSL/TLS vulnerabilities:

| Vulnerability | Impact | TigerTrust Action | |--------------|--------|-------------------| | BEAST | Medium | Alert | | POODLE | High | Urgent alert | | Heartbleed | Critical | Immediate alert + revoke | | ROBOT | High | Alert | | Zombie POODLE | Medium | Alert |

Certificate Chain Validation

Validate certificate chains:

Chain Analysis:
├── Root CA: DigiCert Global Root CA (trusted)
├── Intermediate: DigiCert SHA2 Extended Validation Server CA
└── End Entity: api.example.com
    ├── Valid: Yes
    ├── Trusted: Yes
    ├── Complete Chain: Yes
    └── Proper Order: Yes

Configuration Recommendations

Get actionable recommendations:

recommendations:
  high_priority:
    - Enable HSTS with long max-age
    - Disable TLSv1.0 and TLSv1.1
    - Remove weak cipher suites

  medium_priority:
    - Enable OCSP Stapling
    - Implement CAA records
    - Consider certificate transparency

  low_priority:
    - Optimize cipher suite order
    - Enable TLSv1.3

Trend Analysis

Track SSL security over time:

• Grade history per domain
• Vulnerability trends
• Configuration improvements
• Compliance progression

Achieve SSL excellence with Qualys and TigerTrust.