Extends protection of AWS workloads and infrastructures to guard against critical vulnerabilities, public exploits, and non-compliant deployments.
Qualys, Inc. (NASDAQ: QLYS), a pioneer and leading provider of cloud-based security and compliance solutions, announced the integration of its cloud platform into the Amazon Web Services (AWS) Security Hub, expanding vulnerability analysis and compliance with current policies. The user will then be able to classify risks based on each priority and automate remediation interventions using native services such as AWS Lambda.
AWS Security Hub provides users with a complete view of their security alerts, based on priority and compliance status, by aggregating, organizing, and prioritizing alerts or findings from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, and Amazon Macie, as well as AWS Partner Network (APN) security solutions. The results are then visually summarized on integrated dashboards with actionable graphs and tables.
Vulnerability and configuration assessment activities are key elements for any security program. The native integration of data from Qualys Apps on Vulnerability Management, Policy Compliance and Cloud Security Assessment with the AWS Security Hub service ensures customers have real-time visibility directly from the AWS console on their security and compliance status. Thanks to the comprehensive analysis obtained by correlating data from the Qualys platform with other information present in AWS Security Hub, customers can detect risks in their AWS environments and automatically activate remediation interventions.
“AWS Security Hub gives enterprises the ability to natively embed security and compliance visibility directly into new projects in development and in the cloud,” said Philippe Courtot, President and CEO of Qualys. “By enabling the Qualys platform in AWS Security Hub, developers can easily access up-to-date security risk data, ensuring their clouds comply with corporate policies and standards.”
“AWS Security Hub makes it easy to discover and manage security and compliance findings from AWS workloads,” said Dan Plastina, Vice President of Security Services, Amazon Web Services. “Users can combine these detailed findings with data from other security services, including integrated Qualys Cloud apps, to find additional actionable insights for each vulnerability discovered.”
In AWS workloads and infrastructures, users will be able to detect the presence of:
● Instances and AMIs that are missing critical patches, have critical vulnerabilities, vulnerabilities that are known to be exploitable, or vulnerabilities that may be publicly exposed.
● Compliance with CIS, PCI, NIST, and HIPAA standards as well as custom standards adopted by your organizations.
● Configuration errors in Amazon Virtual Private Cloud (Amazon VPC), AWS Security Groups, Amazon Simple Storage Service (Amazon S3), AWS Identity and Access Management (IAM) found by evaluating compliance with Web Services CIS security best practices and benchmarks.
Qualys Apps on Vulnerability Management, Policy Compliance and Cloud Security Assessment are now available on the AWS Security Hub platform.
Qualys will continue to add security data to the AWS Security Hub service from new Apps that will be integrated into its Cloud Platform.
