Qualys at Microsoft Ignite 2018

Platform
OVERVIEW

Enterprise TruRisk Platform

Everything you need to measure, manage, and reduce your cyber risk in one place

CAPABILITIES

All

Asset Management

Vulnerability & Configuration Management

Risk Remediation

Threat Detection & Response

Compliance

Cloud Security

PLATFORM APPS

ASSET MANAGEMENT

CyberSecurity Asset Management (CSAM)
See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software

External Attack Surface Management (EASM) - New
Gain an attacker’s view of your external internet-facing assets and unauthorized software

Vulnerability & Configuration Management

Vulnerability Management, Detection & Response (VMDR) - Most Popular
Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster

Enterprise TruRisk Management (ETM) - New
Consolidate & translate security & vulnerability findings from 3rd party tools

Web App Scanning (WAS)
Automate scanning in CI/CD environments with shift left DAST testing

Cloud Workload Protection (CWP)
Detect, prioritize, and remediate vulnerabilities in your cloud environment

Risk REMEDIATION

Patch Management (PM)
Efficiently remediate vulnerabilities and patch systems

Custom Assessment and Remediation (CAR)
Quickly create custom scripts and controls for faster, more automated remediation

TruRisk Eliminate (TE)
Address critical vulnerabilities with flexible, patchless solutions

Threat Detection and Response

Multi-Vector EDR
Advanced endpoint threat protection, improved threat context, and alert prioritization

Context XDR
Extend detection and response beyond the endpoint to the enterprise

Compliance

Policy Compliance
Reduce risk, and comply with internal policies and external regulations with ease

File Integrity Monitoring (FIM)
Reduce alert noise and safeguard files from nefarious actors and cyber threats

Cloud Security

TotalCloud (CNAPP)
Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.

Cloud Security Posture Management (CSPM)
Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.

Infrastructure as Code Security (IaC)
Detect and remediate security issues within IaC templates

SaaS Security Posture Management (SSPM) - New
Manage your security posture and risk across your entire SaaS application stack

Cloud Workload Protection (CWP)
Detect, prioritize, and remediate vulnerabilities in your cloud environment

Cloud Detection and Response (CDR)
Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.

Container Security (CS)
Discover, track, and continuously secure containers – from build to runtime
Solutions
Use Cases

Endpoint Security

Compliance

PCI Compliance

DORA Compliance

Cloud Security

Application Security

DevOps

Threat Protection

NIS2

Zero-Trust Security

Segments

Small Business

Mid-Sized Business

Enterprise

Federal
Resources
RESOURCES

Resources Library

Product Tours

Blog

Webinars

Qualys Stream

Fundamentals

RESEARCH

Threat Research Unit

Security Alerts

Security Advisories
Support
SUPPORT
More
Customers

Overview

Best Practices

Success Stories

Testimonials
Partners

Overview

Partner Program

VAD Partners

VAR Resellers

MSP/MSSP Partners

Integration Partners

Partner FAQs

Find a Partner
Company

About Us

Our Team

Investor Relations

News

Awards

Events

Careers

Community
- Overview
- Discuss
- Blog
- Training
- Docs
- Resources
Login
What’s my platform?
Contact us
Contact us below to request a quote, or for any product-related questions
Create Account. It’s Free!
Try PM for free
Try VMDR for free
Try VMDR TruRisk for free
Try CS for free
Sign up for TotalCloud
Sign up for CDR
Try CSAM for free
Try PCI for free
Try DORA for free
Try Policy Compliance for free
Try VMDR for Mobile Devices
Try SaaSDR for free
Try Multi-Vector EDR for Free
Try CAR for Free
Request a Demo
Try it
Enterprise TruRisk Platform
- Cloud Platform - Free Trial
Free Services

Try it

Overview
Platform Apps
Vulnerability Management, Detection & Response (VMDR) - Most Popular
Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster
Enterprise TruRisk Management (ETM) - New
Consolidate & translate security & vulnerability findings from 3rd party tools
Container Security (CS)
Discover, track, and continuously secure containers – from build to runtime
Cloud Workload Protection (CWP)
Detect, prioritize, and remediate vulnerabilities in your cloud environment
Web App Scanning (WAS)
Automate scanning in CI/CD environments with shift left DAST testing

Overview
Platform Apps
TotalCloud (CNAPP)
Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.
Cloud Security Posture Management (CSPM)
Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.
Infrastructure as Code Security (IaC)
Detect and remediate security issues within IaC templates
SaaS Security Posture Management (SSPM) - New
Manage your security posture and risk across your entire SaaS application stack
Cloud Workload Protection (CWP)
Detect, prioritize, and remediate vulnerabilities in your cloud environment
Cloud Detection and Response (CDR)
Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.
Container Security (CS)
Discover, track, and continuously secure containers – from build to runtime

Monday

No sessions of this type are available on this day.
12:30 PM	Booth Opens
12:45 PM	Building Bridges and not Walls – A Shift to Get into DevSecOps Hari Srinivasan, Director of Product Management, Qualys Learn how security teams can leverage automation to provide support at the speed and scale of DevOps. This talk outlines use cases and best practices from three customers who effectively managed to gain visibility and automate security practices in their DevOps pipelines.
1:30 PM	Get Full Visibility of Both Certificates and Underlying SSL/TLS Configurations and Vulnerabilities Laura Seletos, Subject Matter Expert, Qualys Risk management in the age of DevOps and public clouds requires organizations to automate real-time visibility and tracking of their SSL certificate deployments. Learn how Qualys CertView helps customers extend DevSecOps to prevent downtime and disruption, audit and compliance failures, and mitigate risks associated with expired or weak certificates and vulnerable TLS configurations.
2:15 PM	Qualys Container Security – Visibility and Security for Containers from Build to Deployments Hari Srinivasan, Director of Product Management, Qualys Containers are the most sought after development tool for microservices. Their simplicity and portability allow DevOps to create true agile builds within development cycles. However, this new kind of environment brings a new set of security threats at every phase of this cycle - from unvalidated software entering the environment, to secrets being leaked, to runtime drifting and breaking immutable behaviors. This session outlines common security risks and practical use cases across every phase in order to help security teams better understand how to efficiently manage security at the speed and scale of DevOps.
3:00 PM	Incorporate Visibility of Inaccessible or Sensitive Assets into Your Overall Vulnerability and Compliance Program Hariom Singh, Director of Policy Compliance, Qualys Organizations using programmable logic controllers (PLC) and other secretive or disconnected assets can be challenged to incorporate them into the scope of their overall cybersecurity and risk program. Such assets do not allow traditional remote or agent-based scanning and thus remain outside the scope of security assessments. Learn how Qualys Offline Device Assessment, an extension of the Qualys sensor family, enables these organizations to enhance overall risk analysis by extending their single-pane-view of security and compliance to these inaccessible or sensitive assets.
3:45 PM	Building Bridges and not Walls – A Shift to Get into DevSecOps Hari Srinivasan, Director of Product Management, Qualys Learn how security teams can leverage automation to provide support at the speed and scale of DevOps. This talk outlines use cases and best practices from three customers who effectively managed to gain visibility and automate security practices in their DevOps pipelines.
4:30 PM	From Zero to 60: How to Implement Global Vulnerability Management from Scratch Young Kwon, Subject Matter Expert, Qualys Now that you have decided to implement a global Vulnerability Management Program, where do you start? From scanning a network to prioritizing the the threats, along with the assets associated critical vulnerabilities, this talk helps you get started with your new vulnerability risk management program.
5:15 PM	Endpoint Breach Prevention by Reducing Attack Surfaces Brett Price, Regional Vice President, Qualys The most scalable way to prevent breaches of endpoints, servers, and cloud workloads is to reduce the attack surface of the asset itself. Operational vulnerability management, remediation prioritization, transparent patching, secure configuration assessment, real-time activity monitoring, and active threat hunting delivered by a unified security platform can significantly reduce the likelihood of breaches by focusing on reducing the attack surface of enterprise IT environments. In this session, learn how to identify, remediate, detect, and respond to common and targeted attacks that can evade traditional and next-gen prevention technologies.
5:30 – 7:30 PM	Welcome Reception in the Expo
6:00 PM	A 360-degree Approach to Securing Public Clouds Hari Srinivasan, Director of Product Management, Qualys Cloud is a core fabric of digital transformation, as users have a shared security responsibility with the cloud providers. This session will introduce the threats and solutions needed to secure cloud workloads and cloud infrastructure. Learn to gain visibility of your public clouds, secure workloads from both internal and perimeter vulnerabilities, and set up continuous security montioring of cloud resources to avoid issues such as data leaks and cryptomining attacks through your cloud infrastructure.
6:45 PM	Malware Detection – Web Application Scanning's Superhero Sidekick John Delaroderie, Security Solutions Architect, Qualys Qualys Malware Detection (MD) is a free tool offered with Web Application Scanning that most customers overlook when setting up their vulnerability management program. But should you? A web application can be a conduit for malware infection even if there are no web application vulnerabilities. Learn how Qualys Malware detection can help protect your customers - and your reputation - by applying the latest detection methods in heuristics, reputation checks, antivirus signatures, and behavioral analysis.
7:30 PM	Booth Closes

No sessions of this type are available on this day.
10:00 AM	Booth Opens
10:20 AM	Malware Detection – Web Application Scanning's Superhero Sidekick John Delaroderie, Security Solutions Architect, Qualys Qualys Malware Detection (MD) is a free tool offered with Web Application Scanning that most customers overlook when setting up their vulnerability management program. But should you? A web application can be a conduit for malware infection even if there are no web application vulnerabilities. Learn how Qualys Malware detection can help protect your customers - and your reputation - by applying the latest detection methods in heuristics, reputation checks, antivirus signatures, and behavioral analysis.
11:10 AM	Introducing the Healthcare Cloud Security Stack for Azure Deborah Larkins, Lead Technologist, XentIT Hari Srinivasan, Director of Product Management, Qualys
12:00 PM	Endpoint Breach Prevention by Reducing Attack Surfaces Brett Price, Regional Vice President, Qualys The most scalable way to prevent breaches of endpoints, servers, and cloud workloads is to reduce the attack surface of the asset itself. Operational vulnerability management, remediation prioritization, transparent patching, secure configuration assessment, real-time activity monitoring, and active threat hunting delivered by a unified security platform can significantly reduce the likelihood of breaches by focusing on reducing the attack surface of enterprise IT environments. In this session, learn how to identify, remediate, detect, and respond to common and targeted attacks that can evade traditional and next-gen prevention technologies.
12:50 PM	Building Bridges and not Walls – A Shift to Get into DevSecOps Hari Srinivasan, Director of Product Management, Qualys Learn how security teams can leverage automation to provide support at the speed and scale of DevOps. This talk outlines use cases and best practices from three customers who effectively managed to gain visibility and automate security practices in their DevOps pipelines.
1:40 PM	Incorporate Visibility of Inaccessible or Sensitive Assets into Your Overall Vulnerability and Compliance Program Hariom Singh, Director of Policy Compliance, Qualys Organizations using programmable logic controllers (PLC) and other secretive or disconnected assets can be challenged to incorporate them into the scope of their overall cybersecurity and risk program. Such assets do not allow traditional remote or agent-based scanning and thus remain outside the scope of security assessments. Learn how Qualys Offline Device Assessment, an extension of the Qualys sensor family, enables these organizations to enhance overall risk analysis by extending their single-pane-view of security and compliance to these inaccessible or sensitive assets.
2:30 PM	Qualys Container Security – Visibility and Security for Containers from Build to Deployments Hari Srinivasan, Director of Product Management, Qualys Containers are the most sought after development tool for microservices. Their simplicity and portability allow DevOps to create true agile builds within development cycles. However, this new kind of environment brings a new set of security threats at every phase of this cycle - from unvalidated software entering the environment, to secrets being leaked, to runtime drifting and breaking immutable behaviors. This session outlines common security risks and practical use cases across every phase in order to help security teams better understand how to efficiently manage security at the speed and scale of DevOps.
3:20 PM	From Zero to 60: How to Implement Global Vulnerability Management from Scratch Young Kwon, Subject Matter Expert, Qualys Now that you have decided to implement a global Vulnerability Management Program, where do you start? From scanning a network to prioritizing the the threats, along with the assets associated critical vulnerabilities, this talk helps you get started with your new vulnerability risk management program.
4:10 PM	Get Full Visibility of Both Certificates and Underlying SSL/TLS Configurations and Vulnerabilities Laura Seletos, Subject Matter Expert, Qualys Risk management in the age of DevOps and public clouds requires organizations to automate real-time visibility and tracking of their SSL certificate deployments. Learn how Qualys CertView helps customers extend DevSecOps to prevent downtime and disruption, audit and compliance failures, and mitigate risks associated with expired or weak certificates and vulnerable TLS configurations.
5:00 PM	A 360-degree Approach to Securing Public Clouds Hari Srinivasan, Director of Product Management, Qualys Cloud is a core fabric of digital transformation, as users have a shared security responsibility with the cloud providers. This session will introduce the threats and solutions needed to secure cloud workloads and cloud infrastructure. Learn to gain visibility of your public clouds, secure workloads from both internal and perimeter vulnerabilities, and set up continuous security montioring of cloud resources to avoid issues such as data leaks and cryptomining attacks through your cloud infrastructure.
5:00 – 6:00 PM	Social Hour in the Expo
6:00 PM	Booth Closes

OVERVIEW

CAPABILITIES

PLATFORM APPS

ASSET MANAGEMENT

Vulnerability & Configuration Management

Risk REMEDIATION

Threat Detection and Response

Compliance

Cloud Security

Use Cases

Segments

RESOURCES

RESEARCH

Customers

Partners

Company

Overview

CAPABILITIES

Platform Apps

Use Cases

Segments

Resources

Research

Enterprise TruRisk Platform

Free Services

Platform Apps

Platform Apps

Platform Apps

Platform Apps

Platform Apps

Platform Apps

Join us at Microsoft Ignite.

Visit us at booth #1737 to see how the Enterprise TruRisk Platform can secure your Microsoft Azure assets – wherever they reside.

Booth schedule

Filter by

Monday

Tuesday

Wednesday

Thursday

Visit us!

Qualys talks

A 360-degree Cloud-Native Approach to Secure Your Cloud Stack

Sarah Kennedy

Security Vulnerability Engineer, HCA Healthcare

Robert Sloan

Security Vulnerability Engineer, HCA Healthcare

Abe de los Reyes

Security Engineer, Cyber-Threat Management Team, Citrix

Kena Deal

Security Engineer, Cyber-Threat Management Team, Citrix

Brian Canaday

IT Security Analyst / Engineer, CSAA Insurance Group

Josh Oquendo

Vulnerability Manager, Finastra