VMDR offers continuous protection governed by a single pane of glass, with integrated orchestration and real-time vulnerability detection to prioritize, recover and audit hybrid IT environments, all from a single workflow
Milan, 21 November 2019 – Qualys, Inc. (NASDAQ: QLYS), a pioneer and leading provider of cloud-based security and compliance solutions, announces VMDR – Vulnerability, Management, Detection and Response, to provide customers with a single, streamlined workflow that analyzes, reviews, prioritizes and neutralizes threats.
VMDR represents a huge step forward and allows companies of all sizes to strengthen their security posture through a complete workflow for virtual machines, namely:
- Provides IT teams managing vulnerabilities with full, up-to-date visibility into global assets (known and unknown)
- Locate the vulnerability of real-time asset
- Assign priority to the recovery through the use of machine learning and context awareness
- Provides orchestration workflow seamlessly integrated
- Remedies with a single click to the errors and performs comprehensive monitoring
- “With VMDR, Qualys integrates asset visibility with vulnerability management so IT teams can have full visibility into their global assets (known and unknown), to quickly identify weaknesses and prioritize recovery, combining indicators of threats to the resource context and verifying the entire process with a simple click” – he said Scott Crawford, Vice President Research di 451Research.
"VMDR changes the rules of the game and takes vulnerability management to new quality standards, providing the power to detect critical issues and misconfigurations across the entire global hybrid IT environment, allowing for real-time recovery of vulnerable resources or those that have already been compromised, and acting from a single platform with built-in orchestration ”- he stresses Philippe Courtot, President and CEO of Qualys -. "Without forgetting that the new asset-based pricing model and distribution as a single App and self-updating facilitate procurement and management, drastically reducing the total cost of ownership."
VMDR combines Asset Discovery and Inventory, Vulnerability and Assessment, including Configuration Control, Prioritization, Remediation and Audit in a single workflow, which is very simple to deploy on a global scale. This licensing method facilitates the acquisition of the complete bundled solution and reduces software distribution, administration and subscription costs, including lightweight Cloud Agents and Virtual Scanners, which are equipped with self-updating.
Detail of features included in Qualys VMDR:
Automatic identification and classification of resources
Knowing what is active in a global hybrid IT environment is essential for security. With Qualys VMDR, customers can automatically discover and classify assets, continuously identify unmanaged assets, and create workflows that monitor all assets. Once data is collected, customers can instantly query assets to gain full visibility into hardware, system configuration, installed software, services and network connections.
Real-time vulnerability and misconfiguration detection
Qualys VMDR automatically detects vulnerabilities and critical misconfigurations based on CIS (Center for Internet Security) benchmarks, broken down by asset. Misconfigurations that do not include Common Vulnerabilities and Exposures (CVEs) are a major source of breaches and non-compliance in resource vulnerabilities.
Automatic prioritization
Qualys VMDR uses real-time threat intelligence and machine learning models that automatically prioritize the most dangerous vulnerabilities on critical assets. Indicators such as Exploitable, Actively Attacked, High Lateral movement, etc. are used to surface the most at-risk vulnerabilities, while machine learning models help highlight those vulnerabilities that are most likely to become serious threats based on the assigned vulnerability level, providing multiple levels of prioritization
Patch and Recovery at your fingertips
After prioritizing vulnerabilities based on risk, Qualys VMDR allows you to quickly and purposefully remediate these vulnerabilities, in environments of any size, by implementing the most relevant patches. In addition, recurring and automatic policy-based processes keep systems up-to-date, providing proactive management of security and non-security patches, reducing the number of vulnerabilities that the internal team will have to pursue to complete a remediation cycle.
Confirmation and Update
With Qualys VMDR, users can completely manage vulnerabilities from a single control panel with dashboards and widgets that can be customized in real time, having a single resource pricing mode that does not require software to be updated and obtaining a significant reduction in the total cost of ownership. .
Availability
Qualys VMDR will be available in January 2020.