Cloud Platform Cloud Apps More Try it Threat Protection. Pinpoint your most critical threats and prioritize patching. Prioritize remediation with automated and streamlined analysis An introduction (01:36) Demo: Search for a critical exploit (02:49) Demo: Responding to a suspicious device (03:26) Highlights Robust data analysis Threat Protection continuously correlates external threat information against your vulnerabilities and IT asset inventory, leveraging Qualys Cloud Platform’s robust back-end engine to automate this large-scale and intensive data analysis process. With thousands of vulnerabilities disclosed annually, you’ll always know which ones pose the greatest risk to your organization at any given time. The Live Feed As Qualys engineers continuously validate and rate new threats from internal and external sources, Threat Protections’s Live Threat Intelligence Feed displays the latest vulnerability disclosures and maps them to your impacted IT assets. You can see the number of assets affected by each threat, and drill down into asset details. Centralized control and visualization panel A single, dynamic dashboard includes customizable views, graphs and charts giving you a clear and comprehensive view of your threat landscape at a glance in real time. You can create multiple dashboard views, and break down vulnerabilities by real-time threat indicator (RTI) types, such as zero-day exploits. Powerful search function Threat Protection’s search engine lets you look for specific assets and vulnerabilities by crafting ad hoc queries with multiple variables and criteria. You can sort, filter, drill down and fine-tune results. Queries can be saved and turned into dashboard widgets, which can display trend graphs for up to 90 days. Mesh your IT inventory data with threat information Threat Protection continuously correlates external threat data with vulnerability gaps in your IT environment, so your remediation prioritization decisions are rooted in concrete, up-to-date, applicable data, not in guesswork or arbitrary schedules. That way, you’ll stay a step ahead of hackers, patching bugs before bad guys exploit them. Leverages the comprehensive IT asset cataloging of Qualys Asset Inventory and the Six Sigma vulnerability detection accuracy of Qualys Vulnerability Management Lets you prioritize remediation with precision and nimbleness in a continual, contextual and automated manner, so the constant stream of bug disclosures don’t overwhelm you Connects the dots and flags at-risk IT assets wherever they reside – on premises, in cloud environments or at mobile endpoints Helps improve the efficiency of DevOps teams by bringing threat prioritization clarity into the application development and deployment lifecycle Gives you a dynamic snapshot of all the vulnerabilities that exist in your IT environment at any given moment Using actionable intelligence, allows you to assess how critical certain threat scenarios are in your organization’s specific context, since every IT environment is different Look for specific assets and vulnerabilities Threat Protection’s search engine gives you a powerful tool to look for specific assets and vulnerabilities. You can quickly and proactively identify systems across your entire environment exposed to specific threats, and take remediation steps right away. The search syntax is intuitive and the product has a query auto-complete feature. Threat Protection’s search engine lets you: Craft ad hoc queries with multiple variables and criteria – such as asset class, vulnerability type, RTI, tag and operating system – so you can, for example, look for all vulnerabilities that have a severity rating of “5”, are easy to exploit and were disclosed within the last five days Sort, filter and refine search results Save any search, download results and share them Turn queries you run regularly into permanent dashboard widgets whose information is dynamically updated in real time See a live feed of vulnerability disclosures Threat Protection’s Live Threat Intelligence Feed keeps organizations up to date on the latest vulnerabilities and news, so you’re informed about new disclosures and about existing bugs whose risk severity has increased. Plugs into the fire hose of external vulnerability disclosures, so you’re aware of the latest threats out in the wild Displays how many of your IT assets are impacted by each disclosure, thanks to the product’s powerful data correlation capabilities. Segments its content into different columns, including one for “high rated” items Qualys flags and another one for your handpicked “favorites” that you can pin to the feed UI Lets you click on feed entries and drill down into details and more granular information of a particular vulnerability and of the affected IT assets Allows you to fine-tune and narrow down the feed list by filtering and sorting items according to a variety of criteria, and download that set for remediation teams Identify and weigh characteristics that intensify a vulnerability’s danger Threat Protection appends real-time threat indicators (RTIs) to vulnerabilities, tapping findings from Qualys and external sources. Combining this threat data with internal criteria, such as an asset’s role, helps you prioritize remediation. For example, you can see all RTIs for vulnerabilities on a host, and drill down to specific vulnerabilities behind an RTI. Threat Protection RTIs include: ZERO DAY – Vulnerabilities for which there is no vendor patch available and for which an active attack has been observed in the wild PUBLIC EXPLOIT – Vulnerabilities whose exploit knowledge is well known and for which exploit code exists and is publicly available ACTIVELY ATTACKED – Vulnerabilities that are being actively attacked in the wild HIGH LATERAL MOVEMENT – Vulnerabilities that, if compromised, let the attacker propagate the attack broadly throughout the breached network EASY EXPLOIT – Vulnerabilities that can be exploited easily, requiring few skills and little knowledge HIGH DATA LOSS – Vulnerabilities whose exploit will yield massive data loss DENIAL OF SERVICE – Vulnerabilities whose payload could overload or crash the compromised systems so that they become permanently or temporarily unavailable NO PATCH – Vulnerabilities for which there isn’t a fix from the vendor MALWARE – Vulnerabilities associated with malware infection EXPLOIT KIT – Vulnerabilities for which an exploit kit is available Centrally control and visualize the threat prioritization process Customizable dashboards with dynamic widgets help you see your threat landscape in a holistic, consolidated way. You can drill down on the data, mine it for patterns, slice and dice it, aggregate it in custom reports and represent it graphically. This visualization and analysis yields deep insights for patch prioritization. Includes a view for the live feed, as well as a variety of widgets based on RTIs, in the default dashboard setup Allows you to create customized dashboards tailored for different IT and business roles Lets you click through and access more information about the assets flagged as vulnerable Allows you to create dashboard widgets manually or from any search query Lets you set specific thresholds for widget data, and trigger certain actions in response, such as the widget’s background color changing from green to red Sends you notifications when used in conjunction with Qualys Continuous Monitoring Generates reports that you can quickly and easily share across the IT department with those responsible for patching the affected systems Displays trend indicators in widgets, showing data fluctuations over time Powered by the Qualys Cloud Platform Single-pane-of-glass UI See the results in one place, in seconds. With AssetView, security and compliance pros and managers get a complete and continuously updated view of all IT assets — from a single dashboard interface. Its fully customizable and lets you see the big picture, drill down into details, and generate reports for teammates and auditors. Its intuitive and easy-to-build dynamic dashboards to aggregate and correlate all of your IT security and compliance data in one place from all the various Qualys Cloud Apps. With its powerful elastic search clusters, you can now search for any asset – on-premises, endpoints and all clouds – with 2-second visibility. Centralized & customized Centralize discovery of host assets for multiple types of assessments. Organize host asset groups to match the structure of your business. Keep security data private with our end-to-end encryption and strong access controls. You can centrally manage users’ access to their Qualys accounts through your enterprise’s single sign-on (SSO). Qualys supports SAML 2.0-based identity service providers. Easy deployment Deploy from a public or private cloud — fully managed by Qualys. With Qualys, there are no servers to provision, software to install, or databases to maintain. You always have the latest Qualys features available through your browser, without setting up special client software or VPN connections. Scalable and extensible Scale up globally, on demand. Integrate with other systems via extensible XML-based APIs. You can use Qualys with a broad range of security and compliance systems, such as GRC, ticketing systems, SIEM, ERM, and IDS. Learn more about the Qualys Cloud Platform See for yourself. Try Qualys for free. Start your free trial today. No software to download or install. Email us or call us at 1 (800) 745-4355. Try it free Is your web server's SSL/TLS configuration secure? Find out for free. See the power of Qualys, instantly. We don’t use the domain names or the test results, and we never will. Go More free services 60-Day Remote Endpoint Protection Global AssetView Community Edition CertView CloudView API Security Assessment SSL Labs BrowserCheck Cloud Platform Qualys Cloud Platform Private Cloud Platform Private Cloud Platform Appliance Public Cloud Integrations Cloud Agent Cloud Apps Overview Global AssetView – It's Free! CyberSecurity Asset Management Certificate Inventory Vulnerability Management, Detection and Response Threat Protection Continuous Monitoring Endpoint Detection and Response Patch Management Certificate Assessment SaaS Detection & Response Cloud Inventory Cloud Security Assessment Container Security Web App Scanning Web App Firewall Policy Compliance Security Configuration Assessment PCI ASV Compliance File Integrity Monitoring Security Assessment Questionnaire Out-of-Band Configuration Assessment Subscriptions Cloud Apps “a la carte” Free trials & apps Qualys Cloud Platform Qualys VMDR 60-Day Remote Endpoint Protection Global AssetView – It's Free! Partners Overview MSSP partners VAS resellers Consultants and MSPs PCI partners Integration partners Partner FAQs Find a partner Solutions Overview Infrastructure security Cloud Security Endpoint security DevOps Compliance PCI Compliance Web App Security Government Company About us Careers Investor relations Our team News Events Contact Qualys Merchandise Store Resources Community Docs Support Free training Blog Resources Sitemap © 2021 Qualys, Inc. All rights reserved. Privacy Policy. Trust. Cookie Consent.