Qualys Threat Protection Solutions

Leverage the comprehensive IT asset catalog of Qualys asset inventory capabilities and Qualys VMDR’s Six Sigma vulnerability detection accuracy

Prioritize remediation with precision and flexibility in a continual, contextual and automated manner, so the constant stream of new bug disclosures doesn’t overwhelm your time or resources

Connect the dots and flag at-risk IT assets wherever they reside—on premises, in cloud environments or at mobile endpoints

Improve the efficiency of DevOps teams by bringing threat prioritization clarity into the application development and deployment lifecycle via integrations with CMDB and CI/CD tools

Deliver a dynamic snapshot of all existing vulnerabilities in your IT environment at any point in time

Achieve actionable intelligence, enabling you to assess criticality of certain threat scenarios in your organization’s unique business environment

Craft ad hoc queries with multiple variables and criteria such as asset class, vulnerability type, RTI, tag, and operating system; for example, search all vulnerabilities that have a severity rating of 5, are easy to exploit and were disclosed within the last five days

Sort, filter and refine search results

Save any search, download results and share them

Turn queries you run regularly into permanent dashboard widgets that are dynamically updated in real time

Manages the flood of new vulnerability disclosures, so you’re aware of the latest threats exploited in the wild

Displays how many IT assets are impacted by each disclosure, thanks to the solution’s powerful data correlation capabilities

Segments its content into different columns, including high-rated” items that Qualys flags as well as your handpicked favorites pinned to the feed’s UI

Drills down on feed entries for further details and more granular information on a particular vulnerability and affected IT assets

Allows fine-tuning to narrow down the feed list by filtering and sorting items according to a variety of criteria for downloading by remediation teams

ZERO DAY – Vulnerabilities for which there is no vendor patch available and an active attack has been observed in the wild

PUBLIC EXPLOIT – Vulnerabilities whose exploit knowledge is well known and for which exploit code exists and is publicly available

ACTIVELY ATTACKED – Vulnerabilities that are being actively attacked in the wild

HIGH LATERAL MOVEMENT – Vulnerabilities that, if compromised, let the attacker propagate the attack broadly across the breached network

EASY EXPLOIT – Vulnerabilities that can be exploited easily, requiring few skills and little knowledge

HIGH DATA LOSS – Vulnerabilities whose exploitation will result in massive data loss

DENIAL OF SERVICE – Vulnerabilities whose payload could overload or crash the compromised systems so that they become permanently or temporarily unavailable

NO PATCH – Vulnerabilities for which there isn’t a fix from the vendor

MALWARE – Vulnerabilities associated with malware infection

EXPLOIT KIT – Vulnerabilities for which an exploit kit is available