Qualys covers vulnerability management, asset discovery, and compliance checks that help organizations identify and reduce security risks.
Search across headline titles and summaries.
Background for this topic.
Qualys is a cloud-based security platform used to inventory IT assets, identify software vulnerabilities, assess configuration and compliance, and scan web applications. It collects information through network scanners and endpoint agents, then centralizes findings so security teams can track exposure and remediation across servers, workstations, cloud resources, and applications.
Its security value depends on complete, accurate asset coverage: unmanaged systems, failed agents, or incomplete credentials can leave vulnerabilities undiscovered. Findings must also be validated and prioritized using factors such as exploitability, exposure, and business context; a scanner’s severity rating alone does not determine urgency. Because the platform may receive detailed asset, software, configuration, and credential-related data, access controls, role separation, and secure integration are important. Teams can use its records to support vulnerability management and compliance evidence, while incident responders may use historical asset and detection data to scope affected systems and confirm remediation.
Weekly headline count for the current query.
Analysis of 1 billion CISA KEV remediation records reveal a breaking point for human-scale security. Qualys shows most critical flaws are exploited before defenders can patch them. [...]
The "shift left" approach has increased pressure on developers, as speed demands override security checks in modern CI pipelines. Qualys explains how analyzing 34,000 public container images revealed 7.3% were malicious and why security must be enforced at the infrastructure layer by default. [...]
Threat actors behind a recent malware campaign have been using the stolen information of bank customers in Colombia as lures in phishing emails designed to infect them with the BitRAT remote access trojan, according to cloud security firm Qualys. [...]