Is there any integration between Qualys and JIRA. We wanted to create bug in JIRA for the vulnerabilities identified by the Scan.
Hi Vijay, there is no out of the box integration from Qualys to JIRA, simply because of the many ways JIRA can be customized (project wise, workflow wise, etc.). Having said that, I personally have integrated Qualys VM data into a custom JIRA instance and was able to leverage that integration to provide measurable audit metrics and launch what became a successful VM program.
I open sourced the code (it's unsupported) and posted my workflow here:
QGIR: QualysGuard Integration with Reporting
The key to this being a success is stakeholder analysis. When a system with metrics not being measured is being integrated into a system where metrics are being measured, the latter system's metrics will no longer be predictable. Kind of like wiping up a slight spill of orange juice with a dry white cloth, the cloth turns orange and wet in a random shape.
If anyone else has performed this kind of "ticketing" integration in general, I'd like to hear about it here. Also, if you have any questions, just reply back here.
Retrieving data ...