Automated Qualys Security Report Generation and Notification

This n8n workflow automates the process of generating, monitoring, and sharing security reports from Qualys using Slack for notifications. It begins by setting global variables, including the base URL for the Qualys API. The workflow then fetches available report templates from Qualys through an HTTP GET request, converting the XML response into JSON for easier data handling.

Next, it launches a new security report based on selected parameters such as template ID, output format, and report title, via an HTTP POST request. The workflow then enters a loop where it periodically checks the status of the report every minute, ensuring it only proceeds when the report is marked as ‘Finished.’ Once completed, the report is downloaded from Qualys.

Finally, the workflow posts a detailed notification to a designated Slack channel, including report details such as ID, launch time, size, and status, along with a link to access the report. This automation is especially valuable for Security Operations Centers (SOCs), streamlining regular security reporting, saving time, and ensuring timely updates on security posture.