CyberSecurity Asset Management (CSAM) 3.0 by Qualys combines internal attack surface discovery with External Attack Surface Management (EASM) capabilities to provide comprehensive visibility and management across cloud, multi-cloud, on-premises, and IT/OT/IoT environments. The solution utilizes multiple discovery methods including native scanning, agent-based detection, passive discovery, and API-based third-party connectors to discover and monitor assets across the entire attack surface. It continuously discovers, normalizes, and catalogs IT assets, providing real-time detection of unmanaged IoT/OT devices and rogue devices. The platform enables organizations to maintain Configuration Management Database (CMDB) accuracy, track End-of-Life/End-of-Support (EOL/EOS) software, and create a unified inventory of IT assets with detailed technical information. The system integrates with Qualys Cloud Agents and other data collection tools to compile and update a complete inventory across on-premises, cloud, and mobile endpoints while reducing 60% of false positives compared to banner-grabbing tools.
