Qualys

Qualys provides cloud-based security and compliance management software.

Our Products

Qualys Patch Management Streamline and accelerate vulnerability remediation for all your IT assets.

Qualys VMDR De-risk your business with the world's #1 vulnerability management solution.

Qualys VMDR (Vulnerability Management, Detection and Response) Cloud-based vulnerability management solution that discovers, assesses, prioritizes, and remediates vulnerabilities across hybrid IT environments using TruRisk scoring.

TruRisk With so many disparate tools to measure and manage risk, it’s harder than ever to quantify the impact of cyber risk on your businesses. The Enterprise TruRisk Platform provides you with a unified view of your entire cyber risk posture so you and your team can measure, communicate, and eliminate cyber risk with precise remediation activities that drive better business outcomes.

Policy Compliance Automates configuration compliance assessment against a library of prebuilt controls supporting standards such as PCI DSS, HIPAA, ISO 27001, and CIS benchmarks.

Qualys External Asset Management De-risk your external attack surface with patent-pending discovery, asset attribution technology, and industry-leading vulnerability scanning.

Qualys Multi-Vector EDR Qualys Endpoint Detection and Response combines endpoint protection, detection, investigation, and automated response within the Enterprise TruRisk Platform. It unifies NGAV, ransomware defense, vulnerability and patch management, and device control into a single agent and console, reducing tool sprawl and costs. The platform prioritizes threats using business context, automates remediation, and provides visibility into root causes to prevent future compromises. With multi-vector EDR and integrated asset and risk management, Qualys helps security teams stop advanced attacks, eliminate false positives, and address up to 70% of common compromise causes through patching and configuration fixes.

Qualys TotalAppSec AI-powered unified application risk management solution combining web application scanning, API security, and web malware detection across on-premises and multi-cloud environments. Launched February 2025.

Qualys Web Application Scanning (WAS) Discovers and catalogs web applications and APIs, then scans them for vulnerabilities such as the OWASP Top 10 and misconfigurations.

Endpoint Detection and Response (EDR) Detects and responds to malicious activity on endpoints using the Qualys Cloud Agent, unifying endpoint telemetry with vulnerability and asset context.

Enterprise TruRisk Platform Qualys' unified cloud platform that consolidates asset visibility, vulnerability management, compliance, and risk measurement across IT, security, and compliance apps.

Qualys Container Security Discovers, tracks, and secures containers from build to runtime, scanning images and running containers for vulnerabilities and misconfigurations.

Enterprise TruRisk Management (ETM) Risk management application that aggregates security findings from Qualys and third-party tools to measure, communicate, and eliminate cyber risk in business terms. Product confirmed in Qualys documentation; exact URL pattern inferred.

Qualys Certificate View Discovers and inventories TLS/SSL certificates across the enterprise and assesses them for expiration and weak configurations. Product confirmed in Qualys integration documentation; exact URL pattern inferred.

Qualys Custom Assessment and Remediation (CAR) Lets security teams create and execute custom scripts and controls for bespoke assessment and remediation actions across the environment. Product confirmed in Qualys documentation; exact URL pattern inferred.

Qualys CyberSecurity Asset Management (CSAM) Provides automated discovery, inventory, and classification of IT, cloud, and internet-facing assets with security context such as end-of-life software and missing agents.

Qualys File Integrity Monitoring (FIM) Monitors critical files, directories, and registry paths for changes in real time to support compliance mandates such as PCI DSS.

Qualys Inc. Qualys provides cloud-based vulnerability management and IT security compliance software.

Qualys TotalAI Security solution for AI and LLM workloads, discovering AI infrastructure and assessing models and AI applications for vulnerabilities and exposure.

Qualys TotalCloud Cloud-native application protection platform (CNAPP) delivering cloud security posture management, workload protection, and container security with TruRisk prioritization.

Qualys Web Application Firewall Industry-leading cloud service for scalable, simple and powerful protection of web applications

Qualys Web Application Firewall

Product Overview

Industry-leading cloud service for scalable, simple and powerful protection of web applications

Market Landscapes

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Where it's used

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Capabilities

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Research Competitors

Next-Gen WAF Fastly

Our subscription-based Security packages are tailored to meet your organizational needs. In addition to DDoS protection and TLS encryption, we provide comprehensive web application and API security through the Fastly Next-Gen WAF in easy-to-purchase bundles with right-sized support.

Oracle Web Application Firewall Oracle

Protect applications from malicious and unwanted internet traffic with a cloud-based, PCI-compliant, global web application firewall service. By combining threat intelligence with consistent rule enforcement on Oracle Flexible Load Balancer, Oracle Cloud Infrastructure Web Application Firewall strengthens defenses and protects internet-facing application servers and internal applications.

Azure Web Application Firewall Microsoft

Azure Web Application Firewall is a cloud-native service that protects web apps from common web-hacking techniques such as SQL injection and security vulnerabilities such as cross-site scripting. Deploy the service in minutes to get complete visibility into your environment and block malicious attacks.

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Need more information?

Connecting the worlds most innovative cities to the latests smart technology solutions.

Find out More