It is an integrated solution with transparent orchestration to address vulnerabilities and cybersecurity risks on endpoints and local IT resources.
Qualys, Inc. (NASDAQ: QLYS), a pioneer and leading provider of cloud-based security and compliance solutions, has made available Patch Management (PM), a new cloud App with functionality to automatically distribute patches, enabling customers to seamlessly orchestrate vulnerability management throughout the lifecycle of operating systems and software in global hybrid environments.
With the PM App, the Qualys Cloud Platform consolidates vulnerability assessment, threat prioritization and remediation efforts, enabling IT and security teams to centrally manage vulnerability remediation across Windows, macOS and Linux operating systems as well as more than 300 third-party applications. Users will be able to quickly address known vulnerabilities and security flaws without having to consult vendor recommendations, deploy patches to local resources on endpoints or in the cloud, and verify remediation success directly from a single console.
“Patch management is a time-consuming but critical task that organizations struggle to effectively perform at the speed and scale required in modern environments,” said Christopher Kissel, Research Director, Security Products at IDC. “Qualys has created an extraordinary platform with which enterprises can automate the entire vulnerability management lifecycle that includes discovery, classification and remediation on a global scale.”
“Today more than ever, IT and security teams need to work together in digital enterprises to orchestrate remediation on local resources, on endpoints and in the cloud,” said Philippe Courtot, Qualys President and CEO. "The Patch Management App gives them the immediacy and level of automation they need."
Watch the Patch Management App video https://vimeo.com/316102983
Immediate visibility and Remote patching with cloud agents Qualys
Qualys PM can be activated instantly via the same Qualys cloud agent used to assess configurations and vulnerabilities. This agent constantly sends critical change data and supporting details to the cloud, allowing you to enable patching on remote and roaming endpoints outside your network.
Once activated, the PM App continuously collects and transmits telemetry data relating to installed software, open vulnerabilities and missing patches to the Qualys Cloud Platform. Visibility into assets and their security status provides a consistent set of data with which to analyze, classify, deploy and verify patches more efficiently. Additionally, it can be shared and used by IT and security teams to collaborate using common terminology.
Since patch deployment can be affected by remediation windows or change management policies, the Qualys PM App offers the flexibility to schedule patch execution, approve new patch insertion into existing deployment processes to give operational security continuity, creating ad hoc processes for the distribution of emergencies aimed at high-impact vulnerabilities.
Initial support will cover Windows operating systems and over 55 Windows and third-party applications. In the future, support will also include Mac and Linux operating systems, expanded approval flows and add a greater level of automation. Future versions of Qualys PM will be equipped with reporting and visibility functions at all stages of the patching process, with segregation of duties for specific activities, in order to optimize processes and facilitate collaboration.
Availability
The Qualys PM App is available on the market starting in March.
Qualys Cloud Platform
Qualys Cloud Platform represents a quantum leap in enterprise and cloud security. It provides customers with a centralized view of IT security and compliance data across all local and remote resources, endpoints, clouds, containers and web applications, dramatically reducing the cost and complexity of managing multiple security vendors.
The Qualys platform contains 20 top of the line security and compliance apps that are fully integrated, centrally managed and automatically updated. By automatically capturing and analyzing security and compliance data from all IT assets and displaying it unified in a single unit, the Qualys Cloud Platform offers customers the scalability, visibility, accuracy and functionality they need to fight cyberattacks and integrate security into digital transformation projects.
