The Risk Operations Conference 2025 On Demand, Houston

is now

Risk Operations Conference

The next evolution of ROCon25, where the brightest minds in cybersecurity unite to chart the future of cyber risk management.

October 13-16 | Houston, TX

ROCon25 Session Presentations and Videos

ROCon25 featured industry thought leaders, Qualys customers, and product experts who covered a wide range of dynamic cybersecurity industry topics. Click on any of the ROCon25 session presentations below to learn more along with the benefits of the Enterprise TruRisk Platform and how it empowers organizations measure, communicate, and eliminate their cyber risk with precise remediation and mitigation activities to drive better business outcomes.

Keynote Sessions

Fire Doesn’t Innovate: Thriving in the Face of Evolving Cyber Risks

Kip Boyle, Cyber Resilience Thought Leader, Cyber Risk Management Podcast Host, Cyber Risk Opportunities

Presentation (PDF)

Moving From Attack Surface to Risk Surface Management

Sumedh Thakar, President & CEO, Qualys

Presentation (PDF)

Risk Yoga: Stretching Strategy Into Measurable Action

Richard Seiersen, Chief Risk Officer, Qualys

Presentation (PDF)

Qualys & Customer Sessions

Innovations to Power Your Risk Operations Center (ROC)

Shailesh Athalye Senior Vice President, Product Management, Qualys

Presentation (PDF)

Panel: Cyber Risk from a Board Perspective

Moderator, Jonathan Trull CISO & SVP Customer Solutions Strategy, Qualys

Transforming the Risk Operations Center with Agentic AI Workflows

Mayuresh Ektare Vice President, Product Management, Enterprise TruRisk Management, Qualys

Presentation (PDF)

Effective Risk Reduction with Patch and Patchless Strategies

Eran Livne Sr. Director, Product Management, Qualys

Lavish Jhamb, Manager, Product Management, Qualys

Tom Scheffler, Cybersecurity Manager, Cintas

Presentation (PDF)

Redefining Risk Programs: Modernizing VM into Money-Minded CTEM

Kunal Modasiya, Sr. VP Product Management, Qualys

Christy Sluder, Manager, HCA Healthcare

Presentation (PDF)

When Cloud Risk Meets Code: Fixing Attack Paths at the Source

Kunal Modasiya, Sr. VP Product Management, Qualys

Terry Barber, Manager Cybersecurity Encryption & Metrics

Presentation (PDF)

From Gut Feel to Good Data: How AI will Transform Risk Management

Tony Martin-Vegue Technology Risk Consultant, Author, 95 Risk Advisory

Presentation (PDF)

Containers Never Rest. Neither Should Your Strategy

Abhishek Singh VP, Product Management, Qualys

Abhinav Mishra, Director, Product Management - TotalCloud, Kubernetes & Container Security, Qualys

Antonio Anderson, Vice President, Information Security & IT, Somos, Inc.

Presentation (PDF)

Fireside Chat: AI Agents at Work: Balancing Innovation, Risk, and Compliance

Dilip Bachwani CTO and EVP, Cloud Platform, Qualys

Jim Reavis, CEO, Cloud Security Alliance

Partner Panel: Managed Service Offerings for ROC

Karun Malik VP Product & SME, Partner Marketing, Qualys

Chris Catanzaro, VP Global Channels & Alliances, Qualys

Qualys Threat Research Unit: The Secret Ingredient that Changes Everything

Saeed Abbasi Sr. Manager, Product Management for Security Research, Qualys

Presentation (PDF)

Eliminate the risk of Audit Failure

Anu Kapil Sr. Manager, Product Management, Qualys

Joshua McDonald, Comerica Bank

Presentation (PDF)

Perimeters are so 2015: Expanding Risk Operations with Identity Context

Himanshu Kathpal VP, Product Management, Platform and Technologies, Qualys

Corey Amsler, GE Vernova

Presentation (PDF)

App-solutely Secure: Managing Application Security Posture in the Age of AI

Asma Zubair Director, Product Management, Qualys

Joe Moore, Cybersecurity Architect, Siemens

Presentation (PDF)

The Benchmark Advantage: Measuring What Matters in Threat Intel

April Lenhard Principal Product Manager, Qualys

Presentation (PDF)

Build a Strategic Risk Foundation: Turn VMDR Best Practices into Impact

Russ Sanderlin, Director, SME, VMDR

Jon Blevins, Cybersecurity Director, ASR - Threat & Exposure Management, Syniverse

Presentation (PDF)

Ensure Audit Readiness for PCI 4.0 FIM Requirements

Lavish Jhamb Manager, Product Management, Qualys

Presentation (PDF)

GenAI: Harness the Power, Eliminate the Risk

Kunal Modasiya Senior Vice President, Product Management, Qualys

Asma Zubair, Director, Product Management, AppSec, API & Web App Security, Qualys

Presentation (PDF)

One Agent to Rule Them All: Consolidation, Coverage, and Control Without the Sprawl

Spencer Brown Principal Product Manager, Cloud Agent, Qualys

Ali Zaher, Cyber Security Vulnerability Manager, SLB

Presentation (PDF)

Platform
- | Platform
- Overview
- Enterprise TruRisk Platform
  Everything you need to measure, manage, and reduce your cyber risk in one place.
- Capabilities
- All
  - | Platform
  - Risk Operations Center (ROC)
  - Enterprise TruRisk Management / CTEM ^NEW
    Consolidate & translate security & vulnerability findings from 3rd party tools
    
    Agentic AI ^NEW
    Autonomous AI agents that operationalize TruRisk™ to prioritize, orchestrate, and eliminate cyber risk.
    
    ETM Identity ^NEW
    Unified risk operations to secure identity posture
  - Vulnerability & Configuration Management
  - TotalAppSec ^NEW
    Get AI-powered, unified application risk management with web app & API security testing and malware detection all-in-one
    
    TotalAI ^NEW
    Holistic AI security with vulnerability assessment and protection
    
    Vulnerability Management, Detection & Response (VMDR)
    Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster
  - Asset Management
  - CyberSecurity Asset Management (CSAM)
    See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software
    
    External Attack Surface Management (EASM)
    Gain an attacker’s view of your external internet-facing assets and unauthorized software
  - Risk Remediation
  - TruRisk Eliminate (TE) ^NEW
    Address critical vulnerabilities with flexible, patchless solutions
    
    Patch Management (PM)
    Efficiently remediate vulnerabilities and patch systems
    
    Custom Assessment and Remediation (CAR)
    Quickly create custom scripts and controls for faster, more automated remediation
  - Threat Detection & Response
  - Multi-Vector EDR
    Advanced endpoint threat protection, improved threat context, and alert prioritization
  - Compliance
  - Policy Audit ^NEW
    Reduce risk, and comply with internal policies and external regulations with ease
    
    File Integrity Monitoring (FIM)
    Reduce alert noise and safeguard files from nefarious actors and cyber threats
  - Cloud Security
  - TotalCloud (CNAPP)
    Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.
    
    Cloud Security Posture Management (CSPM)
    Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.
    
    Kubernetes and Container Security (KCS)
    Discover, track, and continuously secure containers – from build to runtime
    
    Cloud Workload Protection (CWP)
    Detect, prioritize, and remediate vulnerabilities in your cloud environment
    
    Cloud Infrastructure and Entitlement Management (CIEM)
    Solution to automate the process of managing user entitlements and privileges in cloud environments
    
    Cloud Detection and Response (CDR)
    Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.
    
    SaaS Security Posture Management (SSPM)
    Automate the process of managing your SaaS apps, including global settings, user privileges, licenses, files, and their security and compliance posture.
- Risk Operations Center (ROC)
  - | Platform
  - Risk Operations Center (ROC)
  - Enterprise TruRisk Management / CTEM ^NEW
    Consolidate & translate security & vulnerability findings from 3rd party tools
    
    Agentic AI ^NEW
    
    ETM Identity ^NEW
    Unified risk operations to secure identity posture
- Vulnerability & Configuration Management
  - | Platform
  - Vulnerability & Configuration Management
  - TotalAppSec ^NEW
    Get AI-powered, unified application risk management with web app & API security testing and malware detection all-in-one
    
    TotalAI ^NEW
    Holistic AI security with vulnerability assessment and protection
    
    Vulnerability Management, Detection & Response (VMDR)
    Discover, assess, prioritize, and patch critical vulnerabilities up to 50% faster
    
    Web App Scanning (WAS)
    Automate scanning in CI/CD environments with shift left DAST testing
    
    API Security
    Scan REST/SOAP APIs & check API compliance with shift-left API testing
    
    Web Malware Detection
    Identify known and zero-day attacks using deep learning-based web malware detection
- Asset Management
  - | Platform
  - Asset Management
  - CyberSecurity Asset Management (CSAM)
    See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software
    
    External Attack Surface Management (EASM)
    Gain an attacker’s view of your external internet-facing assets and unauthorized software
- Risk Remediation
  - | Platform
  - Risk Remediation
  - TruRisk Eliminate (TE) ^NEW
    Address critical vulnerabilities with flexible, patchless solutions
    
    Patch Management (PM)
    Efficiently remediate vulnerabilities and patch systems
    
    Custom Assessment and Remediation (CAR)
    Quickly create custom scripts and controls for faster, more automated remediation
- Threat Detection & Response
  - | Platform
  - Threat Detection & Response
  - Multi-Vector EDR
    Advanced endpoint threat protection, improved threat context, and alert prioritization
- Compliance
  - | Platform
  - Compliance
  - Policy Audit ^NEW
    Reduce risk, and comply with internal policies and external regulations with ease
    
    File Integrity Monitoring (FIM)
    Reduce alert noise and safeguard files from nefarious actors and cyber threats
- Cloud Security
  - | Platform
  - Cloud Security
  - TotalCloud (CNAPP)
    Cloud-Native Application Protection Platform (CNAPP) for multi-cloud environment.
    
    Cloud Security Posture Management (CSPM)
    Continuously discover, monitor, and analyze your cloud assets for misconfigurations and non-standard deployments.
    
    Kubernetes and Container Security (KCS)
    Discover, track, and continuously secure containers – from build to runtime
    
    Cloud Workload Protection (CWP)
    Detect, prioritize, and remediate vulnerabilities in your cloud environment
    
    Cloud Infrastructure and Entitlement Management (CIEM)
    Solution to automate the process of managing user entitlements and privileges in cloud environments
    
    Cloud Detection and Response (CDR)
    Continuous real-time protection of the multi-cloud environment against active exploitation, malware, and unknown threats.
    
    SaaS Security Posture Management (SSPM)
    Automate the process of managing your SaaS apps, including global settings, user privileges, licenses, files, and their security and compliance posture.
Solutions
- | Solutions
- Use Cases
- Risk Operations Center ^NEW
- Endpoint Security
- Compliance
- PCI Compliance
- Cloud Security
- DevOps
- Threat Protection
- Software Supply Chain Risk
- NIS2
- Segments
- Small Business
- Mid-Sized Business
- Enterprise
- Public Sector
Customers
- Customers
- Overview
- Best Practices
- Success Stories
- Testimonials
Resources
- | Resources
- Resources
- Resources Library
- Product Tours
- Blog
- Webinars
- ROCon On-Demand
- Research
- Threat Research Unit
- Security Alerts
- Security Advisories
Support
- Support
- Support Portal
- Free Training
- Documentation
- Community Discussions
- Knowledgebase
- Release Notes
- Release Notifications
More
- | More
- Partners
- Overview
- Managed Risk Operations Center Program ^NEW
- Partner Program
- VAD Partners
- VAR Resellers
- MSP/MSSP Partners
- Integration Partners
- Partner FAQs
- Find Partner
- Company
- About Us
- Our Team
- Investor Relations
- News
- Awards
- Events
- Careers
- SF Unicorns ^NEW
Community
- Community
- Overview
- Discuss
- Blog
- Training
- Docs
- Resources
Login
Contact Us
Get Started