Qualys

Qualys provides cloud-based security and compliance management software.

Our Products

Qualys Patch Management Streamline and accelerate vulnerability remediation for all your IT assets.

Qualys VMDR De-risk your business with the world's #1 vulnerability management solution.

Qualys VMDR (Vulnerability Management, Detection and Response) Cloud-based vulnerability management solution that discovers, assesses, prioritizes, and remediates vulnerabilities across hybrid IT environments using TruRisk scoring.

TruRisk With so many disparate tools to measure and manage risk, it’s harder than ever to quantify the impact of cyber risk on your businesses. The Enterprise TruRisk Platform provides you with a unified view of your entire cyber risk posture so you and your team can measure, communicate, and eliminate cyber risk with precise remediation activities that drive better business outcomes.

Policy Compliance Automates configuration compliance assessment against a library of prebuilt controls supporting standards such as PCI DSS, HIPAA, ISO 27001, and CIS benchmarks.

Qualys External Asset Management De-risk your external attack surface with patent-pending discovery, asset attribution technology, and industry-leading vulnerability scanning.

Qualys Multi-Vector EDR Qualys Endpoint Detection and Response combines endpoint protection, detection, investigation, and automated response within the Enterprise TruRisk Platform. It unifies NGAV, ransomware defense, vulnerability and patch management, and device control into a single agent and console, reducing tool sprawl and costs. The platform prioritizes threats using business context, automates remediation, and provides visibility into root causes to prevent future compromises. With multi-vector EDR and integrated asset and risk management, Qualys helps security teams stop advanced attacks, eliminate false positives, and address up to 70% of common compromise causes through patching and configuration fixes.

Qualys TotalAppSec AI-powered unified application risk management solution combining web application scanning, API security, and web malware detection across on-premises and multi-cloud environments. Launched February 2025.

Qualys Web Application Scanning (WAS) Discovers and catalogs web applications and APIs, then scans them for vulnerabilities such as the OWASP Top 10 and misconfigurations.

Endpoint Detection and Response (EDR) Detects and responds to malicious activity on endpoints using the Qualys Cloud Agent, unifying endpoint telemetry with vulnerability and asset context.

Enterprise TruRisk Platform Qualys' unified cloud platform that consolidates asset visibility, vulnerability management, compliance, and risk measurement across IT, security, and compliance apps.

Qualys Container Security Discovers, tracks, and secures containers from build to runtime, scanning images and running containers for vulnerabilities and misconfigurations.

Enterprise TruRisk Management (ETM) Risk management application that aggregates security findings from Qualys and third-party tools to measure, communicate, and eliminate cyber risk in business terms. Product confirmed in Qualys documentation; exact URL pattern inferred.

Qualys Certificate View Discovers and inventories TLS/SSL certificates across the enterprise and assesses them for expiration and weak configurations. Product confirmed in Qualys integration documentation; exact URL pattern inferred.

Qualys Custom Assessment and Remediation (CAR) Lets security teams create and execute custom scripts and controls for bespoke assessment and remediation actions across the environment. Product confirmed in Qualys documentation; exact URL pattern inferred.

Qualys CyberSecurity Asset Management (CSAM) Provides automated discovery, inventory, and classification of IT, cloud, and internet-facing assets with security context such as end-of-life software and missing agents.

Qualys File Integrity Monitoring (FIM) Monitors critical files, directories, and registry paths for changes in real time to support compliance mandates such as PCI DSS.

Qualys Inc. Qualys provides cloud-based vulnerability management and IT security compliance software.

Qualys TotalAI Security solution for AI and LLM workloads, discovering AI infrastructure and assessing models and AI applications for vulnerabilities and exposure.

Qualys TotalCloud Cloud-native application protection platform (CNAPP) delivering cloud security posture management, workload protection, and container security with TruRisk prioritization.

Qualys Web Application Firewall Industry-leading cloud service for scalable, simple and powerful protection of web applications

TruRisk

Product Overview

With so many disparate tools to measure and manage risk, it’s harder than ever to quantify the impact of cyber risk on your businesses. The Enterprise TruRisk Platform provides you with a unified view of your entire cyber risk posture so you and your team can measure, communicate, and eliminate cyber risk with precise remediation activities that drive better business outcomes.

Market Landscapes

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Where it's used

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Capabilities

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Research Competitors

ThreatAware ThreatAware

Gain a comprehensive view of your entire company asset environment, your attack surface and the security posture of each and every endpoint. Protect your organization with powerful visibility, reporting and automation controls to stay secure and compliant.

Centrix for Asset Management and Security Armis

All enterprises need to improve asset visibility, risk prioritization, and security control over their entire attack surface. In a rapidly evolving, perimeter-less world Armis Centrix™ ensures that organizations continuously see, protect, and manage all critical assets.

JupiterOne Platform JupiterOne

Get complete visibility of all your cloud and on-premises assets. Visualize asset connections to see vulnerabilities and their blast radius. Get alerts when important changes occur. Automate compliance and audit evidence collection.

Sign up today for limited access or subscribe to access all data

Already have an account? Log in

Need more information?

Connecting the worlds most innovative cities to the latests smart technology solutions.

Find out More