Alerts you in real time about network irregularities.
Next-generation cloud service for identifying threats and monitoring unexpected network changes before they turn into breaches
The Qualys Cloud Agent helps our medical center improve its vulnerability management efforts and achieve the real-time, continuous security the security team sought.Information Security Analyst
Handling Cyber Operations a Large,
Regional Medical Center
The deep, native integration between Qualys Continuous Monitoring and Qualys Vulnerability Management generates a new approach to information security in which you continuously identify and proactively address potential problems, instead of waiting to respond to incidents.
A wizard guides you step by step in the process of setting up CM, including configuring your rulesets, your monitoring profiles and your notifications
Be alerted right away about vulnerabilities, misconfigurations and other issues that can put you at risk of breaches, including:
By constantly monitoring your network for changes that could put you at risk, CM gives you a comprehensive and up-to-date view of your IT environment, letting you reap a variety of benefits, including:
Unparalleled breach prevention
Time and money savings
For continuous monitoring and quick detection of security and compliance problems to be effective, it’s also necessary that the appropriate staffers be notified, so that prompt action can be taken. Email notifications feature intuitive layouts and are rich in context and content, giving recipients a succinct yet complete account of events.
Leveraging a policy engine, notifications are sent to specific first responders on operations teams responsible for priority assets requiring remediation
Multiple intervals can be set for event notification, matching them to criticality levels, so that alerts for the most important events will be triggered right away, and on the other extreme, low level incidents are communicated once a day, or once a week
Alerts can be sent to people who are not authorized users of Qualys services but who nonetheless should be aware about urgent vulnerabilities or other important issues
Alert rules can be configured for common, general scenarios, or specific ones, and for multiple conditions affecting a variety of assets and elements
Security teams are freed from the delays and burdens of waiting for scheduled scanning windows and from sifting through long reports
Email notifications display the number of new alerts for each category in your selected timeframe. Alerts are also grouped by category. For each alert, you will see the impacted host’s IP address and hostname as well as other event specific details, such as the vulnerability detected, software added or open ports.
Using the CM API (application programming interface), you can integrate CM alerts with your Security Information and Event Management (SIEM) solutions
CM’s dashboard gives you a panoramic, comprehensive, graphics-rich, high-level view of your network, and lets you filter alerts in several ways. You can filter by category — such as Certificate, Host and Vulnerability) — and see all alerts that are configured and applicable within your environment. You can filter by date, so you get all alerts generated within a specified timeframe. These other dashboard features let you:
Closely monitor your security posture, issues and trends
Create customizable reports and views
Quickly and easily identify problem areas
Search alerts to, for example, get a historic view of events leading up to the current alert, or for forensic research
Make precise, informed decisions about appropriate actions to take by calling up granular details, such as: