Qualys is an enterprise-grade vulnerability and web application scanning tool used to detect, assess, and manage security risks across systems and networks. At URI, Qualys plays a key role in our proactive security strategy by routinely scanning administrative networks to identify vulnerabilities before they can be exploited. These scans are conducted from within the URI infrastructure, allowing ITS to monitor, report, and respond to threats efficiently. The platform also includes a Web Application Scanner (WAS), which detects risks such as SQL injection, cross-site scripting (XSS), and other issues identified in the OWASP Top 10.

Executive Lead

Michael Khalfayan

Technical Lead

Andrew Maddock

Support Team

ITS Information Security Office
security@uri.edu

Scans performed with Qualys include:

  • Network vulnerability scanning
  • Web application scanning using OWASP Top 10 standards
  • Detection of threats including SQL injection, XSS, cross-site request forgery (CSRF), and URL redirection

The Qualys WAS helps URI maintain compliance and strengthen security by identifying issues before they impact critical systems and services.

For consultation or more information, contact the ITS Service Desk.