Cloud Platform
Contact us
Asset Management
Vulnerability & Configuration Management
Risk Remediation
Threat Detection & Response
Compliance
Cloud Security

Qualys VMDR TruRisk, VMDR TruRisk FixIT, and VMDR TruRisk ProtectIT

Value-based, all-inclusive cybersecurity packages that include patch management and endpoint protection for small and medium-sized businesses

Small businesses often lack the tools and resources to support a good cybersecurity program, making them more susceptible to cyberattacks. In fact, 43% of all cyberattacks target small businesses, with 68% reporting a cyberattack in the last 12 months (Verizon). While small businesses may not have the same resources to spend on cybersecurity tools and employees, they still need a way to protect their businesses from cyber risks. At Qualys, we have you covered.

Qualys is balancing the scales for small and mid-sized businesses with VMDR TruRisk – all the capabilities of VMDR, built with the small business in mind.

Aflac

VMDR TruRisk - FixIT has changed the way we address our cybersecurity risks. It helps us prioritize and tackle the most critical vulnerabilities first, allowing us to focus our limited resources on the biggest challenges. With its integrated patch management solution, we no longer need a team of administrators dedicated to manual patches and updates. VMDR TruRisk - FixIT is truly a game-changer for us.

Jeff Sturm Jeff Sturm VP Data Solutions & IT at White Glove
Aflac

Qualys VMDR 2.0 has helped us improve our program by providing additional threat and risk context to better identify high-risk vulnerabilities. The transparency of the rating algorithm also made it easy to justify prioritization and align all relevant security and IT stakeholders so we could move quickly to remediate the risk.

Scott Crawford Brian Penn Manager, Security Posture at Aflac
451 Research

With VMDR, Qualys integrates highly valued and much-needed asset visibility with vulnerability management so that IT teams can have full visibility of their global IT assets (known and unknown).

Scott Crawford Scott Crawford Research Vice President at 451 Research
Toyota

VMDR raises the maturity of our Vulnerability Management program to its next level. It provides focus on actionable issues to drive the reduction of imminent risk without doing the analysis outside of the Qualys platform.

Georges Bellefontaine Georges Bellefontaine Manager of Vulnerability Management at Toyota Financial Services
Armor

VMDR delivers unprecedented response capabilities including options for protecting remote users, which has become a top priority for CISOs in the current environment.

Ryan Smith Ryan Smith Vice President of Product at Armor
Omdia

VMDR brings Vulnerability Management to the next level as it provides customers with a comprehensive platform that is easy to use and deploy across complex hybrid environments, which are a challenge for companies to secure.

Rik Turner Rik Turner Principal Analyst at Omdia

Bringing the #1 vulnerability management solution to the small and mid-sized business

What if a vulnerability management solution built for the small business had all the remediation and endpoint protection capabilities of an enterprise-grade cybersecurity platform? Look no further – we thought of that.

Qualys VMDR 2.0 with Qualys TruRisk™, the vulnerability management solution redefining cyber risk management.

Low TCO with Flexible Pricing

Easy to deploy with no hardware to buy or manage. In addition, comes with software auto updates.

Automated Vulnerability Assessment, and Remediation

Automatically detect vulnerabilities in real time. Leverage FixIT to extend remediation and patch vulnerabilities up to 40% faster than other solutions.

Protection Against Ransomware

Automatically block malware and ransomware infections with ProtectIT.

Compliance and Enforcement

Achieve Compliance and stay compliant. VMDR TruRisk offers templated reports and compliance controls for nearly all compliance and regulatory directives, including PCI, HIPAA, CIS, and more.

1

VMDR
TruRisk

Enterprise-grade VMDR functionality

VMDRTruRisk

Comprehensive Risk-Based Vulnerability Management

Know all assets on-prem or cloud, and classify them based OS, application and 100+ attributes.

Comprehensive risk-based vulnerability management solution.

Detect critical threats up to 5x faster by leveraging Risk-Based Prioritization using 25+ threat intelligence feeds.

Maintain Security hygiene for all workstations, servers, databases, and other technologies based on CIS benchmarks.

Monitor SSL certificates for expiry. Prevent business outages, inventory certificates, and renew expired certificates.

PCI assessment with approved ASV scan

Starting at $2,195

2

VMDR
TruRisk FixIT

Enterprise-grade VMDR functionality + Remediation

VMDRTruRisk
+
VMDRTruRisk FixIT

Remediation and Patch Management

All the benefits of VMDR
TruRisk

+

Consolidate IT and Security Tools for vulnerability assessment and remediation

Automate patching for cloud and on-prem assets (operating systems & 100+ 3rd party applications)

Set and forget patching to automatically remediate ransomware, and malware exploitable vulnerabilities

Cut remediation time in half. Up to 40% faster

Starting at $2,995

3

VMDR
TruRisk ProtectIT

Enterprise-grade VMDR functionality + Remediation + Behaviour-based Anti-Virus Protection

VMDRTruRisk ProtectIT
+
VMDRTruRisk
+
VMDRTruRisk FixIT

Anti-virus & Anti-malware Protection

All the benefits of VMDR TruRisk FixIT

+

Antivirus & protection from advanced attacks 

Consolidate IT and Security Tools for vulnerability assessment, remediation and ransomware protection

Rapid investigation, analysis of incidents to prioritize risk to critical assets & remediate risk, via integrated EDR

Starting at $4,645

CAPABILITY VMDR TruRisk VMDR TruRisk – FixIT VMDR TruRisk – ProtectIT
Vulnerability Assessment
Comprehensive vulnerability assessment with support for over 70k+ CVEs
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
Reporting
Standard and custom vulnerability reporting
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
API Support
Launch Scans, and download reports, all through a single unified API
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
Asset Inventory
Inventory all known & unknown assets across on-prem and cloud.
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
Asset Classification
Automatically classify assets based on OS, manufacturer, application and more. Dynamically tag and organize assets
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
Threat Intelligence
Identify high-risk vulnerabilities based on built-in threat intelligence, and pinpoint impacted assets
VMDR TruRiskcheck mark VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
TruRisk Prioritization
Prioritize vulnerabilities exploited in the wild by ransomware with TruRisk Prioritization
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
Scan External Assets
Scan external/internet facing assets and with a single consolidated solution
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
PCI ASV Assessment
Scan assets PCI compliance
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
Configuration Assessment (CIS)/System Hardening
Scan assets for misconfiguration and system hardening based on CIS compliance
VMDR TruRiskcheck mark VMDR TruRisk – FixITcheck mark VMDR TruRisk – ProtectITcheck mark
SSL Certificate Management
Monitor SSL certificates for expiry. Prevent business outages. Inventory certificates and renew expired certificates
VMDR TruRiskcheck mark VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Patch Detection and CVE Correlation
Accurately identify patches to remediate vulnerabilities
VMDR TruRiskcheck mark VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Unified Dashboard
Create customizable executive dashboards
VMDR TruRiskcheck mark VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Patch Operating Systems
Patch Windows, Linux, and Mac Operating systems
VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Automated Remediation
Automate Patch Deployment. Deploy patches based on pre-defined criteria such as TruRisk Score or Real-Time Threat Indicators
VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Custom Remediation
Defined pre and post-deployment scripts before/after deploying patches
VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Patch Third-Party Applications
Patch 100+ third-party applications
VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Cloud Based Patching
100% cloud patching from vendor’s websites and CDNs: NO VPN required
VMDR TruRisk – FixIT check mark VMDR TruRisk – ProtectITcheck mark
Antivirus & Anti-malware Protection
Block zero-day, ransomware, script-based, and phishing attacks using multi-layered behavior and ML-based malware detection techniques
VMDR TruRisk – ProtectITcheck mark
Incident Response
Incident visualization, root cause analysis, and response and remediation workflows
VMDR TruRisk – ProtectITcheck mark
Native VMDR Integration
Identify critical unprotected assets, correlate detected threats to vulnerabilities, patches, and misconfiguration to prevent future attacks
VMDR TruRisk – ProtectITcheck mark
Threat Hunting
Hunt for zero-day threats and search for Indicators of Compromise (IOCs) to identify attack-related behavior.
VMDR TruRisk – ProtectITcheck mark

Powered by Qualys Cloud Platform

Single-pane-of-glass UI

See the results in one place, in seconds. With AssetView, security and compliance pros and managers get a complete and continuously updated view of all IT assets — from a single dashboard interface. Its fully customizable and lets you see the big picture, drill down into details, and generate reports for teammates and auditors. Its intuitive and easy-to-build dynamic dashboards to aggregate and correlate all of your IT security and compliance data in one place from all the various Qualys Cloud Apps. With its powerful elastic search clusters, you can now search for any asset – on-premises, endpoints and all clouds – with 2-second visibility.

Centralized & customized

Centralize discovery of host assets for multiple types of assessments. Organize host asset groups to match the structure of your business. Keep security data private with our end-to-end encryption and strong access controls. You can centrally manage users’ access to their Qualys accounts through your enterprise’s single sign-on (SSO). Qualys supports SAML 2.0-based identity service providers.

Easy deployment

Deploy from a public or private cloud — fully managed by Qualys. With Qualys, there are no servers to provision, software to install, or databases to maintain. You always have the latest Qualys features available through your browser, without setting up special client software or VPN connections.

Scalable and extensible

Scale up globally, on demand. Integrate with other systems via extensible XML-based APIs. You can use Qualys with a broad range of security and compliance systems, such as GRC, ticketing systems, SIEM, ERM, and IDS.

See for yourself. Try Qualys VMDR TruRisk for free.

Start your free trial today. No software to download or install. Email us or call us at 1 (800) 745-4355.