Qualys Cloud Platform Operations has implemented a fix, and we are currently monitoring the results. All modules are operational, and we will continue to observe their performance. However, we are still noticing a lag in Cloud Agent Delta and EDR event processing, although the lag is trending downwards. We will provide updates as they become available.
Further updates will be shared as they become available.
The ticket reference for this activity is IM-12288.
Posted Sep 16, 2025 - 15:18 PDT
Update
At this time, we have observed that most modules initially impacted are now operational and we will continue to monitor. We are still observing a lag in Cloud Agent Delta and EDR Event processing which are still under investigation. We will continue to provide updates as they become available.
Posted Sep 16, 2025 - 11:40 PDT
Update
The Qualys Operations team is engaged in a bridge call to restore connectivity.
We will provide further updates as they become available.
Posted Sep 16, 2025 - 03:09 PDT
Update
We are continuing to investigate this issue.
Posted Sep 15, 2025 - 13:51 PDT
Investigating
Qualys Cloud Platform Operations is investigating an issue on the Qualys US Platform 1.
The functionalities for the following modules might be impacted.
Portal: Report Download response is slow, and the reports are taking a little longer to complete. CS: There will be a delay in scan processing and showing up on UI. CSAM: Reports are being generated, but the report is stuck or taking longer to become available for download. Qflow: Workflow is impacted (intermittently). PM: Scan result, patching activity & report generation/downloads are affected. Also, Linux deployment job - deployment job creation is failing. VM/PC/Cloud Agent: Agent Scan upload may experience disruption leading to an impact on the VM/PC scan. EDR: EDR Forensic Reports are impacted. There will be a slight delay in EDR & MITRE events. CAR: Services are restarting multiple times. SEM: Updated values will not be reflected in the UI; lag increases, and vulnerability details will not be updated. FIM: FIM events and audit data might not be visible. Reporting: Customers may face challenges when uploading and downloading reports for modules using the reporting service, and notifications for these reports will not be sent. Alerting: Alerts may not trigger as expected when events match for all modules utilizing the alerting services. TotalCloud: Reports are created, but stuck in the generated state. PCRS: PCRS reporting will be impacted.
We will provide further updates as they become available.
Posted Sep 15, 2025 - 13:23 PDT
This incident affects: US Platform 1 (Global AssetView (GAV) /CyberSecurity Asset Management (CSAM), Cloud Agent (CA), Total Cloud, Container Security (CS), Endpoint Detection and Response (EDR), File Integrity Monitoring (FIM), Policy Audit / Policy Compliance (PA / PC), Vulnerability Management (VM), Custom Assessment and Remediation (CAR), Qualys Flow (QFLOW)).