As cited
Copy frozen at (site build).
vulnerabilities
Secure Your Mission-Critical Application Estate: Qualys TotalAppSec is Now FedRAMP High Authorized (FedRAMP Certified Class D)
Qualys TotalAppSec has received FedRAMP High authorization on the Qualys Government Platform, enabling federal agencies to deploy application security scanning within High-impact system boundaries. Federal artificial intelligence (AI) adoption has doubled to 3,611 use cases across 56 agencies, with most AI delivered through application programming interfaces (APIs), expanding attack surfaces that traditional inventory methods cannot detect. The authorization addresses converging compliance requirements from CISA BOD 26-04, NIST SP 800-228, and updated FedRAMP rules that mandate continuous application and API discovery, authenticated testing for authorization flaws, and daily vulnerability detection at High impact levels beginning December 7, 2026.
Why it matters: Federal agencies, contractors, and cloud service providers supporting High-impact systems must inventory and continuously test mission-critical applications and APIs by December 7, 2026; an authorized High tool running within the same boundary eliminates a structural authorization barrier that forced teams to accept security gaps or pursue separate authority for tools.
- Source published
- First seen by Cybersecurity Tracker