Qualys in the news.

Discover what we’re up to as the leading provider of network security and compliance solutions.

See what we’re up to

Press

Qualys Introduces Managed Risk Operation Center (mROC) Partner Alliance to Scale Cyber Risk Services

February 5, 2025
Qualys Unveils TotalAppSec: New Comprehensive Application Risk Management Solution

February 3, 2025
Qualys to Report Fourth Quarter 2024 Financial Results on February 6, 2025

January 23, 2025
Qualys to Speak at Upcoming Investor Conference

November 6, 2024
Qualys VMDR Rated Only “Outperformer” and “Leader” by Independent Analyst Firm

October 24, 2024
Qualys to Report Third Quarter 2024 Financial Results on November 5, 2024

October 22, 2024
Qualys Debuts Industry’s First Risk Operations Center (ROC) in the Cloud

October 9, 2024

All press releases

Blog

Microsoft and Adobe Patch Tuesday, April 2025 Security Update Review

April 8, 2025
Steps to TruRisk™ – 2: Measuring the Likelihood of Vulnerability Exploitation

April 7, 2025
The State of Cloud & SaaS Security: Essential Statistics and Insights

April 3, 2025
Qualys TRU Discovers Three Bypasses of Ubuntu Unprivileged User Namespace Restrictions

March 27, 2025
How DevOps Can Move Fast and Stay Secure with TruRisk

March 27, 2025
Microsoft and Adobe Patch Tuesday, March 2025 Security Update Review

March 11, 2025
Steps to TruRisk – 1: Shift to Priority-Driven Strategies

March 10, 2025

Coverage

Cyber Leaders Weigh in on Proposed Vulnerability Disclosure Policy

March 11, 2025 – Security Magazine
Reflections on International Women’s Day: Celebrating leadership, diversity and empowerment

March 11, 2025 – Security Info Watch
A Chinese Espionage Group is Targeting the IT Supply Chain

March 7, 2025 – Security Magazine
Celebrating International Women's Day 2025 with Tech Leaders Across the Industry

March 7, 2025 – VMblog
Silk Typhoon Targets IT Supply Chain in Evolving Cyber Campaign

March 6, 2025 – Security Buzz
Should Contractors Disclose Vulnerabilities to Get Government Work?

March 6, 2025 – SC Magazine
Federal Contractor Cybersecurity Vulnerability Reduction Act Passes in U.S. House

March 6, 2025 – SecureWorld

All media coverage

Platform
- | Platform
- Overview
- Enterprise TruRisk Platform
  Everything you need to measure, manage, and reduce your cyber risk in one place.
- Capabilities
- All
  - | Platform
  - Asset Management
  - CyberSecurity Asset Management (CSAM)
    See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software
    
    External Attack Surface Management (EASM)
    Gain an attacker’s view of your external internet-facing assets and unauthorized software
  - Vulnerability & Configuration Management
  - TotalAppSec ^NEW
    Get AI-powered, unified application risk management with web app & API security testing and malware detection all-in-one
    
    Enterprise TruRisk Management (ETM) ^NEW
    Consolidate & translate security & vulnerability findings from 3rd party tools
    
    TotalAI ^NEW
    Holistic AI security with vulnerability assessment and protection
    
    Vulnerability Management, Detection & Response (VMDR)
    Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster
    
    Enterprise TruRisk Management (ETM)
    Consolidate & translate security & vulnerability findings from 3rd party tools
  - Risk Remediation
  - TruRisk Eliminate (TE) ^NEW
    Address critical vulnerabilities with flexible, patchless solutions
    
    Patch Management (PM)
    Efficiently remediate vulnerabilities and patch systems
    
    Custom Assessment and Remediation (CAR)
    Quickly create custom scripts and controls for faster, more automated remediation
  - Threat Detection & Response
  - Multi-Vector EDR
    Advanced endpoint threat protection, improved threat context, and alert prioritization
  - Compliance
  - Policy Compliance
    Reduce risk, and comply with internal policies and external regulations with ease
    
    File Integrity Monitoring (FIM)
    Reduce alert noise and safeguard files from nefarious actors and cyber threats
  - Cloud Security
  - TotalCloud (CNAPP)
    Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.
    
    Cloud Security Posture Management (CSPM)
    Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.
    
    Infrastructure as Code Security (IaC)
    Detect and remediate security issues within IaC templates
    
    SaaS Security Posture Management (SSPM)
    Automate the process of managing your SaaS apps, including global settings, user privileges, licenses, files, and their security and compliance posture.
    
    Cloud Workload Protection (CWP)
    Detect, prioritize, and remediate vulnerabilities in your cloud environment
    
    Cloud Detection and Response (CDR)
    Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.
    
    Kubernetes and Container Security (KCS)
    Discover, track, and continuously secure containers – from build to runtime
- Asset Management
  - | Platform
  - Asset Management
  - CyberSecurity Asset Management (CSAM)
    See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software
    
    External Attack Surface Management (EASM)
    Gain an attacker’s view of your external internet-facing assets and unauthorized software
- Vulnerability & Configuration Management
  - | Platform
  - Vulnerability & Configuration Management
  - Enterprise TruRisk Management (ETM) ^NEW
    Consolidate & translate security & vulnerability findings from 3rd party tools
    
    TotalAI ^NEW
    Holistic AI security with vulnerability assessment and protection
    
    Vulnerability Management, Detection & Response (VMDR)
    Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster
    
    Enterprise TruRisk Management (ETM)
    Consolidate & translate security & vulnerability findings from 3rd party tools
    
    TotalAppSec ^NEW
    Get AI-powered, unified application risk management with web app & API security testing and malware detection all-in-one
    
    Web App Scanning (WAS)
    Automate scanning in CI/CD environments with shift left DAST testing
    
    API Security
    Scan REST/SOAP APIs & check API compliance with shift-left API testing
    
    Web Malware Detection
    Identify known and zero-day attacks using deep learning-based web malware detection
- Risk Remediation
  - | Platform
  - Risk Remediation
  - TruRisk Eliminate (TE) ^NEW
    Address critical vulnerabilities with flexible, patchless solutions
    
    Patch Management (PM)
    Efficiently remediate vulnerabilities and patch systems
    
    TruRisk Mitigate (TM) ^NEW
    Mitigate vulnerabilities without relying on patches.
    
    Custom Assessment and Remediation (CAR)
    Quickly create custom scripts and controls for faster, more automated remediation
- Threat Detection & Response
  - | Platform
  - Threat Detection & Response
  - Multi-Vector EDR
    Advanced endpoint threat protection, improved threat context, and alert prioritization
- Compliance
  - | Platform
  - Compliance
  - Policy Compliance
    Reduce risk, and comply with internal policies and external regulations with ease
    
    File Integrity Monitoring (FIM)
    Reduce alert noise and safeguard files from nefarious actors and cyber threats
- Cloud Security
  - | Platform
  - Cloud Security
  - TotalCloud (CNAPP)
    Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.
    
    Cloud Security Posture Management (CSPM)
    Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.
    
    Infrastructure as Code Security (IaC)
    Detect and remediate security issues within IaC templates
    
    SaaS Security Posture Management (SSPM)
    Automate the process of managing your SaaS apps, including global settings, user privileges, licenses, files, and their security and compliance posture.
    
    Cloud Workload Protection (CWP)
    Detect, prioritize, and remediate vulnerabilities in your cloud environment
    
    Cloud Detection and Response (CDR)
    Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.
    
    Kubernetes and Container Security (KCS)
    Discover, track, and continuously secure containers – from build to runtime
Solutions
- | Solutions
- Use Cases
- Risk Operations Center ^NEW
- Endpoint Security
- Compliance
- PCI Compliance
- Cloud Security
- DevOps
- Threat Protection
- Software Supply Chain Risk
- NIS2
- Segments
- Small Business
- Mid-Sized Business
- Enterprise
- Public Sector
Customers
- Customers
- Overview
- Best Practices
- Success Stories
- Testimonials
Resources
- | Resources
- Resources
- Resources Library
- Product Tours
- Blog
- Webinars
- Qualys Stream
- Research
- Threat Research Unit
- Security Alerts
- Security Advisories
Support
- Support
- Support Portal
- Free Training
- Documentation
- Community Discussions
- Knowledgebase
- Release Notes
- Release Notifications
More
- | More
- Partners
- Overview
- Managed Risk Operations Center Program ^NEW
- Partner Program
- VAD Partners
- VAR Resellers
- MSP/MSSP Partners
- Integration Partners
- Partner FAQs
- Find Partner
- Company
- About Us
- Our Team
- Investor Relations
- News
- Awards
- Events
- Careers
Community
- Community
- Overview
- Discuss
- Blog
- Training
- Docs
- Resources
Login
Contact Us
- Contact Us
- Chat with Us
- Schedule a Demo
- +1800 745 4355
- Request a call or Email
- Global Offices with Contacts
Try Now