Qualys

Qualys provides the Enterprise TruRisk Platform, a comprehensive solution that offers a unified view of an organization’s entire cyber risk posture. The platform integrates over 20 applications designed for IT, security, and compliance needs. Among its offerings, Qualys includes TotalCloud, a Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environments, and a Cloud Security Posture Management (CSPM) solution for continuous discovery, monitoring, and analysis of cloud assets. The company also offers a SaaS Security Posture Management (SSPM) solution to manage security and risk across SaaS applications, and a Custom Assessment and Remediation (CAR) app for creating custom scripts and automated remediation controls. Additionally, Qualys provides a File Integrity Monitoring (FIM) solution to safeguard files from cyber threats and reduce alert noise, and a Kubernetes and Container Security (KCS) solution to secure containers from build to runtime. The platform includes a Patch Management (PM) app for efficient vulnerability remediation and system patching, and a Multi-Vector Endpoint Detection and Response (EDR) solution for advanced endpoint threat protection. Qualys extends detection and response capabilities beyond endpoints with its Context Extended Detection and Response (XDR) solution and offers real-time protection for multi-cloud environments with its Cloud Detection and Response (CDR) solution. The Vulnerability Management, Detection, and Response (VMDR) app helps organizations discover, assess, prioritize, and patch critical vulnerabilities. For web applications, the platform includes a Web App Scanning (WAS) solution that automates scanning in CI/CD environments. Qualys also provides an External Attack Surface Management (EASM) solution to gain an attacker’s perspective on external internet-facing assets and a CyberSecurity Asset Management (CSAM) solution to maintain visibility of the entire attack surface and the CMDB. The Policy Compliance (PC) app helps organizations reduce risk and comply with internal policies and external regulations, while the Infrastructure as Code Security (IaC) solution detects and remediates security issues within IaC templates. The Cloud Workload Protection (CWP) solution prioritizes and remediates vulnerabilities in cloud environments, and the Security Assessment Questionnaire (SAQ) solution automates business risk assessments. Qualys’ Threat Research Unit (TRU) provides ongoing threat research and security advisories. The Global AssetView solution offers instant visibility of all global IT assets. Qualys also provides a Community Edition for free, offering access to various security tools and resources, and a 60-Day Remote Endpoint Protection service at no cost. The SSL Labs service helps assess the security of web server SSL/TLS configurations.