qualys-cli 0.1.1__py3-none-any.whl

qualys_cli/commands/was.py

@@ -0,0 +1,1278 @@
+# Auto-generated from api-model.json — run scripts/generate_commands.py to regenerate.
+# Web Application Scanning APIs  (Basic auth, XML responses)
+from __future__ import annotations
+
+import typer
+
+from .. import client as _c
+from ..formatters import DEFAULT_LIMIT, output, output_success
+
+app = typer.Typer(name="was", help="Web Application Scanning APIs — webapps, scans, findings, auth records, schedules, reports")
+
+# ---------------------------------------------------------------------------
+# Helpers
+# ---------------------------------------------------------------------------
+
+def _search_xml(filters: list[tuple[str, str, str]] | None = None, *, count_only: bool = False) -> str:
+    """Build a minimal WAS search ServiceRequest XML body."""
+    parts = ['<?xml version="1.0" encoding="UTF-8"?>', "<ServiceRequest>"]
+    if filters:
+        parts.append("<filters>")
+        for field, op, value in filters:
+            parts.append(f'<Criteria field="{field}" operator="{op}">{value}</Criteria>')
+        parts.append("</filters>")
+    parts.append("</ServiceRequest>")
+    return "\n".join(parts)
+
+
+def _wrap(tag: str, body: str) -> str:
+    return f"<ServiceRequest><data><{tag}>{body}</{tag}></data></ServiceRequest>"
+
+
+# ── webapp ────────────────────────────────────────────────────────────────────
+_webapp = typer.Typer(help="Web application operations")
+app.add_typer(_webapp, name="webapp")
+
+
+@_webapp.command("list")
+def webapp_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name", help="Filter by name (CONTAINS)"),
+    url: str | None = typer.Option(None, "--url", help="Filter by URL (CONTAINS)"),
+    tag_id: str | None = typer.Option(None, "--tag-id", help="Filter by tag ID"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list web applications.
+
+    Source: https://docs.qualys.com/en/was/api/web_apps/get_webapp_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    if url:
+        filters.append(("url", "CONTAINS", url))
+    if tag_id:
+        filters.append(("tags.id", "EQUALS", tag_id))
+    data = client.post_xml("/qps/rest/3.0/search/was/webapp", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_webapp.command("get")
+def webapp_get(
+    ctx: typer.Context,
+    webapp_id: str = typer.Argument(..., help="Web application ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get details of a web application.
+
+    Source: https://docs.qualys.com/en/was/api/web_apps/get_webapp_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/webapp/{webapp_id}", {})
+    output(data, format=format)
+
+
+@_webapp.command("count")
+def webapp_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get the count of web applications.
+
+    Source: https://docs.qualys.com/en/was/api/web_apps/webapp_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/webapp", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_webapp.command("create")
+def webapp_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Web application name"),
+    url: str = typer.Option(..., "--url", help="Starting URL (e.g. https://myapp.com)"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a web application.
+
+    Source: https://docs.qualys.com/en/was/api/web_apps/create_webapp.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WebApp>"
+        f"<name><![CDATA[{name}]]></name>"
+        f"<url><![CDATA[{url}]]></url>"
+        "</WebApp></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/create/was/webapp", data=xml_body)
+    output(data)
+
+
+@_webapp.command("update")
+def webapp_update(
+    ctx: typer.Context,
+    webapp_id: str = typer.Argument(..., help="Web application ID"),
+    name: str | None = typer.Option(None, "--name", help="New name"),
+    url: str | None = typer.Option(None, "--url", help="New URL"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Update a web application.
+
+    Source: https://docs.qualys.com/en/was/api/web_apps/update_webapp.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    fields = ""
+    if name:
+        fields += f"<name><![CDATA[{name}]]></name>"
+    if url:
+        fields += f"<url><![CDATA[{url}]]></url>"
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        f"<ServiceRequest><data><WebApp>{fields}</WebApp></data></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/3.0/update/was/webapp/{webapp_id}", data=xml_body)
+    output(data)
+
+
+@_webapp.command("delete")
+def webapp_delete(
+    ctx: typer.Context,
+    webapp_id: str = typer.Argument(..., help="Web application ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete a web application.
+
+    Source: https://docs.qualys.com/en/was/api/web_apps/delete_webapp.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete web application {webapp_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/webapp/{webapp_id}", data=_search_xml())
+    output(data)
+
+
+@_webapp.command("purge")
+def webapp_purge(
+    ctx: typer.Context,
+    webapp_id: str = typer.Argument(..., help="Web application ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Purge all scan data for a web application.
+
+    Source: https://docs.qualys.com/en/was/api/web_apps/purge_webapp.htm
+    """
+    if not yes:
+        typer.confirm(f"Purge all scan data for web application {webapp_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/purge/was/webapp/{webapp_id}", data=_search_xml())
+    output(data)
+
+
+# ── scan ──────────────────────────────────────────────────────────────────────
+_scan = typer.Typer(help="WAS scan operations")
+app.add_typer(_scan, name="scan")
+
+
+@_scan.command("list")
+def scan_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name", help="Filter by scan name (CONTAINS)"),
+    webapp_id: str | None = typer.Option(None, "--webapp-id", help="Filter by web application ID"),
+    status: str | None = typer.Option(None, "--status", help="SUBMITTED|RUNNING|FINISHED|ERROR|CANCELLED"),
+    scan_type: str | None = typer.Option(None, "--type", help="VULNERABILITY|DISCOVERY"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list WAS scans.
+
+    Source: https://docs.qualys.com/en/was/api/scans/get_scan_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    if webapp_id:
+        filters.append(("webApp.id", "EQUALS", webapp_id))
+    if status:
+        filters.append(("status", "EQUALS", status))
+    if scan_type:
+        filters.append(("type", "EQUALS", scan_type))
+    data = client.post_xml("/qps/rest/3.0/search/was/wasscan", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_scan.command("get")
+def scan_get(
+    ctx: typer.Context,
+    scan_id: str = typer.Argument(..., help="Scan ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get scan details.
+
+    Source: https://docs.qualys.com/en/was/api/scans/get_scan_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/wasscan/{scan_id}", {})
+    output(data, format=format)
+
+
+@_scan.command("count")
+def scan_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of WAS scans.
+
+    Source: https://docs.qualys.com/en/was/api/scans/scan_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/wasscan", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_scan.command("status")
+def scan_status(
+    ctx: typer.Context,
+    scan_id: str = typer.Argument(..., help="Scan ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get current status of a scan.
+
+    Source: https://docs.qualys.com/en/was/api/scans/scan_status.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/status/was/wasscan/{scan_id}", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_scan.command("launch")
+def scan_launch(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Scan name"),
+    webapp_id: str = typer.Option(..., "--webapp-id", help="Web application ID to scan"),
+    profile_id: str = typer.Option(..., "--profile-id", help="Option profile ID"),
+    scan_type: str = typer.Option("VULNERABILITY", "--type", help="VULNERABILITY|DISCOVERY"),
+    scanner_type: str = typer.Option("EXTERNAL", "--scanner-type", help="EXTERNAL|INTERNAL"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Launch a WAS scan on a single web application.
+
+    Source: https://docs.qualys.com/en/was/api/scans/launch_scan_single.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WasScan>"
+        f"<name><![CDATA[{name}]]></name>"
+        f"<type>{scan_type}</type>"
+        f"<target><webApp><id>{webapp_id}</id></webApp>"
+        f"<scannerAppliance><type>{scanner_type}</type></scannerAppliance></target>"
+        f"<profile><id>{profile_id}</id></profile>"
+        "</WasScan></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/launch/was/wasscan", data=xml_body)
+    output(data)
+
+
+@_scan.command("cancel")
+def scan_cancel(
+    ctx: typer.Context,
+    scan_id: str = typer.Argument(..., help="Scan ID"),
+    keep_results: bool = typer.Option(False, "--keep-results", help="Retain partial results"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Cancel an in-progress scan.
+
+    Source: https://docs.qualys.com/en/was/api/scans/cancel_scan.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WasScan>"
+        f"<cancelWithResults>{str(keep_results).lower()}</cancelWithResults>"
+        "</WasScan></data></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/3.0/cancel/was/wasscan/{scan_id}", data=xml_body)
+    output(data)
+
+
+@_scan.command("results")
+def scan_results(
+    ctx: typer.Context,
+    scan_id: str = typer.Argument(..., help="Scan ID"),
+    output_file: str = typer.Option("scan-results.xml", "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Download raw XML results for a completed scan.
+
+    Source: https://docs.qualys.com/en/was/api/scans/scan_results.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    resp = client.request("GET", f"/qps/rest/3.0/download/was/wasscan/{scan_id}")
+    from pathlib import Path
+    Path(output_file).write_bytes(resp.content)
+    output_success(f"Scan results saved to {output_file} ({len(resp.content):,} bytes)")
+
+
+@_scan.command("delete")
+def scan_delete(
+    ctx: typer.Context,
+    scan_id: str = typer.Argument(..., help="Scan ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete a scan.
+
+    Source: https://docs.qualys.com/en/was/api/scans/delete_scan.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete scan {scan_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/wasscan/{scan_id}", data=_search_xml())
+    output(data)
+
+
+@_scan.command("scan-again")
+def scan_scan_again(
+    ctx: typer.Context,
+    scan_id: str = typer.Argument(..., help="Scan ID to re-run"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Re-run a completed scan with the same settings.
+
+    Source: https://docs.qualys.com/en/was/api/scan_again.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/scanAgain/was/wasscan/{scan_id}", data=_search_xml())
+    output(data)
+
+
+# ── finding ───────────────────────────────────────────────────────────────────
+_finding = typer.Typer(help="WAS finding operations")
+app.add_typer(_finding, name="finding")
+
+
+@_finding.command("list")
+def finding_list(
+    ctx: typer.Context,
+    webapp_id: str | None = typer.Option(None, "--webapp-id"),
+    qid: str | None = typer.Option(None, "--qid", help="Qualys finding ID"),
+    status: str | None = typer.Option(None, "--status", help="NEW|ACTIVE|REOPENED|PROTECTED|FIXED"),
+    finding_type: str | None = typer.Option(None, "--type", help="VULNERABILITY|SENSITIVE_CONTENT|INFORMATION_GATHERED"),
+    severity: str | None = typer.Option(None, "--severity", help="1-5"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list findings.
+
+    Source: https://docs.qualys.com/en/was/api/finding/get_finding_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if webapp_id:
+        filters.append(("webApp.id", "EQUALS", webapp_id))
+    if qid:
+        filters.append(("qid", "EQUALS", qid))
+    if status:
+        filters.append(("status", "EQUALS", status))
+    if finding_type:
+        filters.append(("type", "EQUALS", finding_type))
+    if severity:
+        filters.append(("severity", "EQUALS", severity))
+    data = client.post_xml("/qps/rest/3.0/search/was/finding", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_finding.command("get")
+def finding_get(
+    ctx: typer.Context,
+    finding_id: str = typer.Argument(..., help="Finding ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get details of a finding.
+
+    Source: https://docs.qualys.com/en/was/api/finding/get_finding_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/finding/{finding_id}", {})
+    output(data, format=format)
+
+
+@_finding.command("count")
+def finding_count(
+    ctx: typer.Context,
+    webapp_id: str | None = typer.Option(None, "--webapp-id"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of findings.
+
+    Source: https://docs.qualys.com/en/was/api/finding/finding_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if webapp_id:
+        filters.append(("webApp.id", "EQUALS", webapp_id))
+    data = client.post_xml("/qps/rest/3.0/count/was/finding", data=_search_xml(filters or None))
+    output(data, format=format, output_file=output_file)
+
+
+@_finding.command("ignore")
+def finding_ignore(
+    ctx: typer.Context,
+    finding_id: str = typer.Argument(..., help="Finding ID"),
+    reason: str = typer.Option(..., "--reason", help="Ignore reason (e.g. FALSE_POSITIVE, NOT_APPLICABLE)"),
+    comment: str | None = typer.Option(None, "--comment"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Ignore a finding.
+
+    Source: https://docs.qualys.com/en/was/api/finding/ignore_finding.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    comment_xml = f"<comments><![CDATA[{comment}]]></comments>" if comment else ""
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><Finding>"
+        f"<ignoredReason>{reason}</ignoredReason>"
+        f"{comment_xml}"
+        "</Finding></data></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/3.0/ignore/was/finding/{finding_id}", data=xml_body)
+    output(data)
+
+
+@_finding.command("reactivate")
+def finding_reactivate(
+    ctx: typer.Context,
+    finding_id: str = typer.Argument(..., help="Finding ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Reactivate (un-ignore) a finding.
+
+    Source: https://docs.qualys.com/en/was/api/finding/activate_finding.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/activate/was/finding/{finding_id}", data=_search_xml())
+    output(data)
+
+
+@_finding.command("restore")
+def finding_restore(
+    ctx: typer.Context,
+    finding_id: str = typer.Argument(..., help="Finding ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Restore a fixed finding to active state.
+
+    Source: https://docs.qualys.com/en/was/api/finding/restore_finding.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/restore/was/finding/{finding_id}", data=_search_xml())
+    output(data)
+
+
+@_finding.command("retest")
+def finding_retest(
+    ctx: typer.Context,
+    finding_id: str = typer.Argument(..., help="Finding ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Request a retest of a specific finding.
+
+    Source: https://docs.qualys.com/en/was/api/finding/retest_finding.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/retest/was/finding/{finding_id}", data=_search_xml())
+    output(data)
+
+
+@_finding.command("retest-status")
+def finding_retest_status(
+    ctx: typer.Context,
+    finding_id: str = typer.Argument(..., help="Finding ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get the retest status of a finding.
+
+    Source: https://docs.qualys.com/en/was/api/finding/retrieve_finding_retest_status.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/retestStatus/was/finding/{finding_id}", {})
+    output(data)
+
+
+@_finding.command("edit-severity")
+def finding_edit_severity(
+    ctx: typer.Context,
+    finding_id: str = typer.Argument(..., help="Finding ID"),
+    severity: int = typer.Option(..., "--severity", help="New severity 1-5"),
+    comment: str | None = typer.Option(None, "--comment"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Edit the severity of a finding.
+
+    Source: https://docs.qualys.com/en/was/api/finding/edit_finding.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    comment_xml = f"<comments><![CDATA[{comment}]]></comments>" if comment else ""
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><Finding>"
+        f"<severity>{severity}</severity>"
+        f"{comment_xml}"
+        "</Finding></data></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/3.0/editSeverity/was/finding/{finding_id}", data=xml_body)
+    output(data)
+
+
+# ── auth-record ───────────────────────────────────────────────────────────────
+_auth = typer.Typer(help="Authentication record operations")
+app.add_typer(_auth, name="auth-record")
+
+
+@_auth.command("list")
+def auth_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name", help="Filter by name (CONTAINS)"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list authentication records.
+
+    Source: https://docs.qualys.com/en/was/api/auth/get_auth_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    data = client.post_xml("/qps/rest/3.0/search/was/webappauthrecord", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_auth.command("get")
+def auth_get(
+    ctx: typer.Context,
+    auth_id: str = typer.Argument(..., help="Authentication record ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get authentication record details.
+
+    Source: https://docs.qualys.com/en/was/api/auth/get_auth_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/webappauthrecord/{auth_id}", {})
+    output(data, format=format)
+
+
+@_auth.command("count")
+def auth_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of authentication records.
+
+    Source: https://docs.qualys.com/en/was/api/auth/auth_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/webappauthrecord", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_auth.command("delete")
+def auth_delete(
+    ctx: typer.Context,
+    auth_id: str = typer.Argument(..., help="Authentication record ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete an authentication record.
+
+    Source: https://docs.qualys.com/en/was/api/auth/delete_auth.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete auth record {auth_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/webappauthrecord/{auth_id}", data=_search_xml())
+    output(data)
+
+
+# ── option-profile ────────────────────────────────────────────────────────────
+_profile = typer.Typer(help="Option profile operations")
+app.add_typer(_profile, name="option-profile")
+
+
+@_profile.command("list")
+def profile_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name", help="Filter by name (CONTAINS)"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list option profiles.
+
+    Source: https://docs.qualys.com/en/was/api/option_profile/get_op_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    data = client.post_xml("/qps/rest/3.0/search/was/optionprofile", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_profile.command("get")
+def profile_get(
+    ctx: typer.Context,
+    profile_id: str = typer.Argument(..., help="Option profile ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get option profile details.
+
+    Source: https://docs.qualys.com/en/was/api/option_profile/get_op_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/optionprofile/{profile_id}", {})
+    output(data, format=format)
+
+
+@_profile.command("count")
+def profile_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of option profiles.
+
+    Source: https://docs.qualys.com/en/was/api/option_profile/op_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/optionprofile", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_profile.command("create")
+def profile_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Option profile name"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create an option profile with default settings.
+
+    Source: https://docs.qualys.com/en/was/api/option_profile/create_op.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><OptionProfile>"
+        f"<name><![CDATA[{name}]]></name>"
+        "</OptionProfile></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/create/was/optionprofile", data=xml_body)
+    output(data)
+
+
+@_profile.command("delete")
+def profile_delete(
+    ctx: typer.Context,
+    profile_id: str = typer.Argument(..., help="Option profile ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete an option profile.
+
+    Source: https://docs.qualys.com/en/was/api/option_profile/delete_op.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete option profile {profile_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/optionprofile/{profile_id}", data=_search_xml())
+    output(data)
+
+
+# ── schedule ──────────────────────────────────────────────────────────────────
+_schedule = typer.Typer(help="Scan schedule operations")
+app.add_typer(_schedule, name="schedule")
+
+
+@_schedule.command("list")
+def schedule_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name", help="Filter by name (CONTAINS)"),
+    webapp_id: str | None = typer.Option(None, "--webapp-id"),
+    active: bool | None = typer.Option(None, "--active/--inactive"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list scan schedules.
+
+    Source: https://docs.qualys.com/en/was/api/schedules/get_schedule_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    if webapp_id:
+        filters.append(("webApp.id", "EQUALS", webapp_id))
+    if active is not None:
+        filters.append(("active", "EQUALS", str(active).upper()))
+    data = client.post_xml("/qps/rest/3.0/search/was/wasscanschedule", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_schedule.command("get")
+def schedule_get(
+    ctx: typer.Context,
+    schedule_id: str = typer.Argument(..., help="Schedule ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get schedule details.
+
+    Source: https://docs.qualys.com/en/was/api/schedules/get_schedule_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/wasscanschedule/{schedule_id}", {})
+    output(data, format=format)
+
+
+@_schedule.command("count")
+def schedule_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of scan schedules.
+
+    Source: https://docs.qualys.com/en/was/api/schedules/schedule_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/wasscanschedule", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_schedule.command("create")
+def schedule_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Schedule name"),
+    webapp_id: str = typer.Option(..., "--webapp-id", help="Web application ID"),
+    profile_id: str = typer.Option(..., "--profile-id", help="Option profile ID"),
+    scan_type: str = typer.Option("VULNERABILITY", "--type", help="VULNERABILITY|DISCOVERY"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a scan schedule.
+
+    Source: https://docs.qualys.com/en/was/api/schedules/create_schedule.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WasScanSchedule>"
+        f"<name><![CDATA[{name}]]></name>"
+        f"<type>{scan_type}</type>"
+        f"<target><webApp><id>{webapp_id}</id></webApp></target>"
+        f"<profile><id>{profile_id}</id></profile>"
+        "</WasScanSchedule></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/create/was/wasscanschedule", data=xml_body)
+    output(data)
+
+
+@_schedule.command("activate")
+def schedule_activate(
+    ctx: typer.Context,
+    schedule_id: str = typer.Argument(..., help="Schedule ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Activate a scan schedule.
+
+    Source: https://docs.qualys.com/en/was/api/schedules/activate_schedule.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WasScanSchedule>"
+        "<active>true</active>"
+        "</WasScanSchedule></data></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/3.0/update/was/wasscanschedule/{schedule_id}", data=xml_body)
+    output(data)
+
+
+@_schedule.command("deactivate")
+def schedule_deactivate(
+    ctx: typer.Context,
+    schedule_id: str = typer.Argument(..., help="Schedule ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Deactivate a scan schedule.
+
+    Source: https://docs.qualys.com/en/was/api/schedules/deactivate_schedule.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WasScanSchedule>"
+        "<active>false</active>"
+        "</WasScanSchedule></data></ServiceRequest>"
+    )
+    data = client.post_xml(f"/qps/rest/3.0/update/was/wasscanschedule/{schedule_id}", data=xml_body)
+    output(data)
+
+
+@_schedule.command("delete")
+def schedule_delete(
+    ctx: typer.Context,
+    schedule_id: str = typer.Argument(..., help="Schedule ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete a scan schedule.
+
+    Source: https://docs.qualys.com/en/was/api/schedules/delete_schedule.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete schedule {schedule_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/wasscanschedule/{schedule_id}", data=_search_xml())
+    output(data)
+
+
+# ── report ────────────────────────────────────────────────────────────────────
+_report = typer.Typer(help="Report operations")
+app.add_typer(_report, name="report")
+
+
+@_report.command("list")
+def report_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name", help="Filter by name (CONTAINS)"),
+    status: str | None = typer.Option(None, "--status", help="RUNNING|COMPLETE|ERROR"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Search/list reports.
+
+    Source: https://docs.qualys.com/en/was/api/reports/get_report_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    if status:
+        filters.append(("status", "EQUALS", status))
+    data = client.post_xml("/qps/rest/3.0/search/was/report", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_report.command("get")
+def report_get(
+    ctx: typer.Context,
+    report_id: str = typer.Argument(..., help="Report ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get report details.
+
+    Source: https://docs.qualys.com/en/was/api/reports/get_report_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/report/{report_id}", {})
+    output(data, format=format)
+
+
+@_report.command("status")
+def report_status(
+    ctx: typer.Context,
+    report_id: str = typer.Argument(..., help="Report ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get the status of a report.
+
+    Source: https://docs.qualys.com/en/was/api/reports/get_report_status.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/status/was/report/{report_id}", {})
+    output(data)
+
+
+@_report.command("count")
+def report_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of reports.
+
+    Source: https://docs.qualys.com/en/was/api/reports/report_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/report", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_report.command("create-webapp")
+def report_create_webapp(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Report name"),
+    webapp_id: str = typer.Option(..., "--webapp-id", help="Web application ID"),
+    template_id: str | None = typer.Option(None, "--template-id", help="Report template ID"),
+    report_format: str = typer.Option("PDF", "--format-type", help="PDF|HTML|XML|CSV|WORD"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a web application vulnerability report.
+
+    Source: https://docs.qualys.com/en/was/api/report_creation/webapp_report.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    tmpl_xml = f"<template><id>{template_id}</id></template>" if template_id else ""
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><Report>"
+        f"<name><![CDATA[{name}]]></name>"
+        f"<format>{report_format}</format>"
+        "<type>WEB_APP_REPORT</type>"
+        f"<config><webAppReport><target><webApps><WebApp><id>{webapp_id}</id></WebApp></webApps></target></webAppReport></config>"
+        f"{tmpl_xml}"
+        "</Report></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/create/was/report", data=xml_body)
+    output(data)
+
+
+@_report.command("create-scan")
+def report_create_scan(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="Report name"),
+    scan_id: str = typer.Option(..., "--scan-id", help="Scan ID"),
+    template_id: str | None = typer.Option(None, "--template-id"),
+    report_format: str = typer.Option("PDF", "--format-type", help="PDF|HTML|XML|CSV"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a scan-based report.
+
+    Source: https://docs.qualys.com/en/was/api/report_creation/scan_report.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    tmpl_xml = f"<template><id>{template_id}</id></template>" if template_id else ""
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><Report>"
+        f"<name><![CDATA[{name}]]></name>"
+        f"<format>{report_format}</format>"
+        "<type>SCAN_REPORT</type>"
+        f"<config><scanReport><target><scans><WasScan><id>{scan_id}</id></WasScan></scans></target></scanReport></config>"
+        f"{tmpl_xml}"
+        "</Report></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/create/was/report", data=xml_body)
+    output(data)
+
+
+@_report.command("download")
+def report_download(
+    ctx: typer.Context,
+    report_id: str = typer.Argument(..., help="Report ID"),
+    output_file: str = typer.Option("was-report.pdf", "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Download a completed report.
+
+    Source: https://docs.qualys.com/en/was/api/reports/download_report.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    resp = client.request("GET", f"/qps/rest/3.0/download/was/report/{report_id}")
+    from pathlib import Path
+    Path(output_file).write_bytes(resp.content)
+    output_success(f"Report saved to {output_file} ({len(resp.content):,} bytes)")
+
+
+@_report.command("delete")
+def report_delete(
+    ctx: typer.Context,
+    report_id: str = typer.Argument(..., help="Report ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete a report.
+
+    Source: https://docs.qualys.com/en/was/api/reports/delete_report.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete WAS report {report_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/report/{report_id}", data=_search_xml())
+    output(data)
+
+
+# ── catalog ───────────────────────────────────────────────────────────────────
+_catalog = typer.Typer(help="Web application catalog operations")
+app.add_typer(_catalog, name="catalog")
+
+
+@_catalog.command("list")
+def catalog_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List catalog entries.
+
+    Source: https://docs.qualys.com/en/was/api/catalog/get_catalog_entry_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    data = client.post_xml("/qps/rest/3.0/search/was/catalog", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_catalog.command("count")
+def catalog_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of catalog entries.
+
+    Source: https://docs.qualys.com/en/was/api/catalog/count_catalog_entires.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/catalog", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_catalog.command("add-to-subscription")
+def catalog_add(
+    ctx: typer.Context,
+    catalog_id: str = typer.Argument(..., help="Catalog entry ID"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Add a catalog entry to the subscription (creates a web application).
+
+    Source: https://docs.qualys.com/en/was/api/catalog/add_to_subscription.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/addToSubscription/was/catalog/{catalog_id}", data=_search_xml())
+    output(data)
+
+
+@_catalog.command("delete")
+def catalog_delete(
+    ctx: typer.Context,
+    catalog_id: str = typer.Argument(..., help="Catalog entry ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete catalog entries.
+
+    Source: https://docs.qualys.com/en/was/api/catalog/delete_catalog_entries.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete catalog entry {catalog_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/catalog/{catalog_id}", data=_search_xml())
+    output(data)
+
+
+# ── dns ───────────────────────────────────────────────────────────────────────
+_dns = typer.Typer(help="DNS override operations")
+app.add_typer(_dns, name="dns")
+
+
+@_dns.command("list")
+def dns_list(
+    ctx: typer.Context,
+    name: str | None = typer.Option(None, "--name"),
+    limit: int = typer.Option(DEFAULT_LIMIT, "--limit", "-n"),
+    format: str = typer.Option("table", "--format", "-f"),
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """List DNS overrides.
+
+    Source: https://docs.qualys.com/en/was/api/dns_override/get_dns_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    filters: list[tuple[str, str, str]] = []
+    if name:
+        filters.append(("name", "CONTAINS", name))
+    data = client.post_xml("/qps/rest/3.0/search/was/dnsoverride", data=_search_xml(filters or None))
+    output(data, format=format, limit=limit, output_file=output_file)
+
+
+@_dns.command("get")
+def dns_get(
+    ctx: typer.Context,
+    dns_id: str = typer.Argument(..., help="DNS override ID"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get DNS override details.
+
+    Source: https://docs.qualys.com/en/was/api/dns_override/get_dns_details.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml(f"/qps/rest/3.0/get/was/dnsoverride/{dns_id}", {})
+    output(data, format=format)
+
+
+@_dns.command("count")
+def dns_count(
+    ctx: typer.Context,
+    output_file: str | None = typer.Option(None, "--output-file", "-o"),
+    format: str = typer.Option("table", "--format", "-f"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Get count of DNS overrides.
+
+    Source: https://docs.qualys.com/en/was/api/dns_override/dns_count.htm
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.get_xml("/qps/rest/3.0/count/was/dnsoverride", {})
+    output(data, format=format, output_file=output_file)
+
+
+@_dns.command("create")
+def dns_create(
+    ctx: typer.Context,
+    name: str = typer.Option(..., "--name", help="DNS override name"),
+    hostname: str = typer.Option(..., "--hostname", help="Hostname to override"),
+    ip: str = typer.Option(..., "--ip", help="IP address to map to"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Create a DNS override.
+
+    Source: https://docs.qualys.com/en/was/api/dns_override/create_dns.html
+    """
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><DnsOverride>"
+        f"<name><![CDATA[{name}]]></name>"
+        "<mappings><set>"
+        f"<DnsMapping><hostName>{hostname}</hostName><ipAddress>{ip}</ipAddress></DnsMapping>"
+        "</set></mappings>"
+        "</DnsOverride></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/create/was/dnsoverride", data=xml_body)
+    output(data)
+
+
+@_dns.command("delete")
+def dns_delete(
+    ctx: typer.Context,
+    dns_id: str = typer.Argument(..., help="DNS override ID"),
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Delete a DNS override.
+
+    Source: https://docs.qualys.com/en/was/api/dns_override/delete_dns.htm
+    """
+    if not yes:
+        typer.confirm(f"Delete DNS override {dns_id}?", abort=True)
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    data = client.post_xml(f"/qps/rest/3.0/delete/was/dnsoverride/{dns_id}", data=_search_xml())
+    output(data)
+
+
+# ── import ────────────────────────────────────────────────────────────────────
+_import = typer.Typer(help="Import findings from external tools")
+app.add_typer(_import, name="import")
+
+
+@_import.command("burp")
+def import_burp(
+    ctx: typer.Context,
+    webapp_id: str = typer.Option(..., "--webapp-id", help="Target web application ID"),
+    file_path: str = typer.Option(..., "--file", help="Path to Burp Suite XML export file"),
+    purge_results: bool = typer.Option(False, "--purge-results", help="Remove previous results"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Import findings from a Burp Suite XML export.
+
+    Source: https://docs.qualys.com/en/was/api/burp/import_burp.htm
+    """
+    from pathlib import Path as _Path
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WasBurpScan>"
+        f"<webApp><id>{webapp_id}</id></webApp>"
+        f"<purgeResults>{str(purge_results).lower()}</purgeResults>"
+        f"<file><![CDATA[{_Path(file_path).read_text()}]]></file>"
+        "</WasBurpScan></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/import/was/burpsuite/", data=xml_body)
+    output(data)
+
+
+@_import.command("owasp-zap")
+def import_owasp_zap(
+    ctx: typer.Context,
+    webapp_id: str = typer.Option(..., "--webapp-id", help="Target web application ID"),
+    file_path: str = typer.Option(..., "--file", help="Path to OWASP ZAP XML report file"),
+    purge_results: bool = typer.Option(False, "--purge-results"),
+    close_unreported: bool = typer.Option(False, "--close-unreported", help="Mark unfound issues as fixed"),
+    verbose: int = typer.Option(0, "--verbose", "-v", count=True),
+):
+    """Import findings from an OWASP ZAP XML report.
+
+    Source: https://docs.qualys.com/en/was/api/zap/import_owasp_findings.htm
+    """
+    from pathlib import Path as _Path
+    client = _c.make(ctx.obj, auth_type="basic", verbose=verbose)
+    xml_body = (
+        '<?xml version="1.0" encoding="UTF-8"?>'
+        "<ServiceRequest><data><WasOwaspZapScan>"
+        f"<webApp><id>{webapp_id}</id></webApp>"
+        f"<purgeResults>{str(purge_results).lower()}</purgeResults>"
+        f"<closeUnreportedIssues>{str(close_unreported).lower()}</closeUnreportedIssues>"
+        f"<file><![CDATA[{_Path(file_path).read_text()}]]></file>"
+        "</WasOwaspZapScan></data></ServiceRequest>"
+    )
+    data = client.post_xml("/qps/rest/3.0/import/was/owaspzap/", data=xml_body)
+    output(data)