New capabilities give security, cloud operations and IT teams insights into their risk posture along with easy to use drag and drop orchestration to respond to critical threats
Qualys unveiled Qualys Vulnerability Management, Detection and Response (VMDR) 2.0. The new cloud-based solution gives unprecedented insights into an organisation’s unique risk posture and the ability to use drag and drop workflows to orchestrate responses.
Qualys VMDR 2.0 provides insight into security and IT teams need to focus on the vulnerabilities that genuinely reduce risk. Qualys beta customers with the TruRisk capability enabled prioritised on average 28 per cent fewer critical vulnerabilities across a sample size of 2.6 million assets and 74 million detections. Simultaneously, they were able to reduce risk on average by 23 per cent and in some cases as high as 50 per cent.
Qualys VMDR with TruRisk offers risk-based vulnerability management for unprecedented insights into an organisation’s unique risk posture to prioritise its most critical vulnerabilities across hybrid environments. The solution helps security and IT teams increase efficiency and save time by providing shared context and creating drag and drop workflows to automate time-consuming vulnerability management operational processes, including vulnerability assessment of ephemeral cloud assets, alerting, and prioritisation.
Qualys VMDR with TruRisk allows Security and IT teams to:
Reduce Risk with Holistic Scoring – Quantify risk across the entire attack surface, including vulnerabilities, misconfigurations and digital certificates, correlate with business criticality and exploit intelligence from hundreds of sources, including Shodan’s attack surface exposure data. Qualys VMDR with TruRisk automatically de-prioritizes vulnerabilities if compensating controls are in force, tracks risk reduction trends over time, and helps organisations measure and report on the effectiveness of their cybersecurity program across hybrid environments.
Quickly Remediate at Scale – Leverage rule-based integrations between VMDR and ITSM tools such as ServiceNow and JIRA and dynamic vulnerability tagging to automatically assign remediation tickets to prioritised vulnerabilities and bridge the gap between security and IT teams. Orchestrate remediation directly from the ITSM tool to help close vulnerabilities faster and reduce the mean time to remediation.
Receive Preemptive Attack Alerts – External threat intelligence, from more than 180,000 vulnerabilities and 25 plus threat and exploit intelligence sources, is natively correlated with vulnerabilities and misconfigurations to proactively alert teams on vulnerabilities exploited by malware or those used in an active malicious campaign known to target your industry.
Automate Operational Workflows – Teams save valuable time and resources with Qualys Qflow technology. They can develop drag-and-drop visual workflows to automate time-consuming and complex vulnerability management tasks, such as vulnerability assessments for ephemeral cloud assets, alerting for high-profile threats or quarantining high-risk investments.