About Qualys
Qualys provides the Enterprise TruRisk Platform, an end-to-end solution for all aspects of IT, security and compliance. The Enterprise TruRisk Platform is a suite of apps integrated into a single platform. Enterprise TruRisk Platform apps natively share the data they collect, so the financial impact of a security posture can be expressed in real time. Qualys is a SaaS security company with 25 years of history.[2]
Qualys states that frontier AI weaponizes vulnerabilities in hours while patch cycles run in weeks. Qualys proposes an operating model of AI-Speed Detection, Hyper-Prioritization and Zero-Day Remediation. Qualys builds AI agents into Enterprise TruRisk Management for prioritizing, remediating and eliminating risks.[2]
TruRisk Eliminate 2.0 is the Autonomous RemOps platform from Qualys. TruRisk Eliminate 2.0 runs on TruConfidence, a Remediation Intelligence and Orchestration Engine. TruRisk Eliminate 2.0 decides on and executes remediation paths across the attack surface. InstaScan matches each disclosed CVE against a live inventory in real time to show exposure.[2]
Qualys addresses AI that an organisation does not know about, assessing what that AI can expose, access and do.[2]
Policy Audit uses improved control statements that describe the intent of each control. Some control statements include the technology name. Control checks apply to Windows services, Linux files, Oracle parameters and network device configurations. Control statements appear in the control library and control details. Control statements appear in posture results and evaluation output. Integrations can reference controls by CID, and those integrations are not affected by the statement change. Improved control statements are the first step in an effort to change how Policy Audit controls are described, rated and organised. Upcoming releases are planned to add consistent, formula-based criticality ratings.
Improved control statements apply to subscriptions on the Shared Cloud Platform (SCP), while Private Cloud Platform (PCP) subscriptions follow a separate release cycle. The improved control statements setting applies at the subscription level, and once it is enabled all users in the subscription see the updated statements. Until April 2027, a Manager or POC Manager can switch back to the previous control statements.
Qualys offers a FedRAMP High Authorized platform for VMDR and CNAPP that is aimed at NIST 800-53 requirements.[2]
Qualys on the record