Vulnerability Management Detection and Response (VMDR)

Asset Discovery And Inventory

Automatically discovers and categorizes both known and unknown assets, including internal and internet-exposed IT, OT, and IoT assets. Classifies assets based on OS, application and 100+ attributes, continuously identifying unmanaged assets and creating automated workflows to manage active assets in global hybrid-IT environments.

Vulnerability Detection And Assessment

Continuously detects vulnerabilities including zero-day exploits through the Threat Detection Feed, performing real-time assessment with Six Sigma accuracy. Automatically detects vulnerabilities and critical misconfigurations according to CIS benchmarks across mobile devices, operating systems, and applications.

Risk-Based Prioritization

Analyzes risk factors beyond CVSS scores using the Qualys Detection Score (QDS), considering business context and asset criticality. Correlates real-time threat information with vulnerabilities and IT asset inventory, utilizing 25+ threat intelligence feeds and 80,000+ signatures to identify vulnerabilities that have been or are likely to be exploited.

Itsm Integration And Remediation

Integrates with IT Service Management systems to close the remediation loop, enabling auto-assignment of tickets with 96% accuracy based on Qualys tags. Implements rule-based integrations for automated ticket routing, SLA assignments, and orchestration using QFlow for automating operational tasks related to vulnerability management and patching.

Cloud And Container Security

Detects, prioritizes, and remediates vulnerabilities specifically within cloud environments. Discovers, tracks, and secures containers from build to runtime environments by identifying vulnerabilities in container infrastructure.