Qualys Integration

Qualys Integration with TigerTrust

TigerTrust integrates with Qualys SSL Labs for comprehensive SSL/TLS security assessment.

SSL Labs Integration

Configure SSL Labs scanning:

yaml
1qualys:
2  ssl_labs:
3    enabled: true
4    scan_interval: weekly
5
6    domains:
7      - api.example.com
8      - www.example.com
9      - app.example.com
10
11    thresholds:
12      minimum_grade: A
13      alert_on_downgrade: true

Grade Monitoring

Track SSL Labs grades:

json
1{
2  "domain": "api.example.com",
3  "grade": "A+",
4  "grade_trust_ignored": "A+",
5  "has_warnings": false,
6  "is_exceptional": true,
7  "details": {
8    "certificate": {
9      "grade": "100",
10      "issues": []
11    },
12    "protocol_support": {
13      "grade": "100",
14      "protocols": ["TLSv1.2", "TLSv1.3"]
15    },
16    "key_exchange": {
17      "grade": "90",
18      "algorithms": ["ECDHE"]
19    },
20    "cipher_strength": {
21      "grade": "90",
22      "weak_ciphers": false
23    }
24  }
25}

Vulnerability Detection

Detect SSL/TLS vulnerabilities:

Certificate Chain Validation

Validate certificate chains:

text
1Chain Analysis:
2├── Root CA: DigiCert Global Root CA (trusted)
3├── Intermediate: DigiCert SHA2 Extended Validation Server CA
4└── End Entity: api.example.com
5    ├── Valid: Yes
6    ├── Trusted: Yes
7    ├── Complete Chain: Yes
8    └── Proper Order: Yes

Configuration Recommendations

Get actionable recommendations:

yaml
1recommendations:
2  high_priority:
3    - Enable HSTS with long max-age
4    - Disable TLSv1.0 and TLSv1.1
5    - Remove weak cipher suites
6
7  medium_priority:
8    - Enable OCSP Stapling
9    - Implement CAA records
10    - Consider certificate transparency
11
12  low_priority:
13    - Optimize cipher suite order
14    - Enable TLSv1.3

Trend Analysis

Track SSL security over time:

• Grade history per domain
• Vulnerability trends
• Configuration improvements
• Compliance progression

Achieve SSL excellence with Qualys and TigerTrust.