diff --git a/app/services/qualys_tags_service.py b/app/services/qualys_tags_service.py
index 26031a5..5b55b3d 100644
--- a/app/services/qualys_tags_service.py
+++ b/app/services/qualys_tags_service.py
@@ -15,13 +15,21 @@ CATALOG_PATH = Path(__file__).parent.parent.parent / "deploy" / "qualys_tags_v3.
 
 
 def _get_creds(db):
-    """Retourne (url, user, pass, proxy) depuis app_secrets."""
+    """Retourne (url, user, pass, proxy) depuis app_secrets.
+
+    Respecte le flag `qualys_bypass_proxy` (settings UI): si coche,
+    le proxy est ignore (chaine vide) meme si `qualys_proxy` est defini.
+    """
     from .secrets_service import get_secret
+    proxy = get_secret(db, "qualys_proxy") or ""
+    bypass = (get_secret(db, "qualys_bypass_proxy") or "").lower() == "true"
+    if bypass:
+        proxy = ""
     return (
         get_secret(db, "qualys_url"),
         get_secret(db, "qualys_user"),
         get_secret(db, "qualys_pass"),
-        get_secret(db, "qualys_proxy"),
+        proxy,
     )