Qualys Launches Free Service to Help Organizations De-Risk their Business

Qualys offers a FREE 30-day trial of their Enterprise TruRisk Platform to help organizations meet NCSC’s patching recommendations. Discover assets, prioritize vulnerabilities, and automate patching for faster remediation and improved security posture.

Qualys, Inc., a leading provider of disruptive cloud-based IT, security, and compliance solutions, announced it is offering free 30-day access to the Qualys Enterprise TruRisk Platform to aid organizations in efficiently discovering and classifying internet-facing and internal-facing assets and prioritizing vulnerabilities for swift and safe remediation. This aligns with the UK’s National Cyber Security Centre (NCSC) 5-7 days guidance. 

NCSC recently released guidance recommending patching vulnerabilities for internet-facing services and software within five days and non-external-facing vulnerabilities within seven days. Many organizations find it challenging to accurately discover all their assets, specifically internet-facing, efficiently measure and prioritize and remediate the risk. Anonymized customer data from the Qualys Threat Research Unit (TRU) indicates the average organization’s median time to remediate (MTTR) was 29 days. In contrast, the median time to weaponize (MTTW) was seven days. 

Also Read: Explained: CACTUS Ransomware

The free access to the Qualys Enterprise TruRisk Platform allows organizations to remediate issues in as little as 30 minutes and within seven days for full alignment. Incorporating Vulnerability Management Detection and Response (VMDR), CyberSecurity Asset Management, and Patch Management, the Qualys offering helps organizations to:

• Identify External Assets: Accurately discover internal and external assets within your environment and flag End of Life (EOL) and End of Support (EOS) software and devices. 

• Conduct Efficient Risk-based Prioritization: Vulnerabilities are prioritized by their TruRisk score and automatically mapped to necessary updates to simplify IT workflows for a customized NCSC risk and remediation view.
• Automate Patching: Qualys Patch Management closes the gap between security and IT teams. It brings these groups together to safely prioritize and deploy patches automatically, helping customers update by default within seven days. 

“Given the rate at which adversaries are weaponizing vulnerabilities, it is almost impossible for most organizations, with their complex infrastructures and patch workflows, to keep up,” said Hadi Jaafarawi, Managing Director – Middle East, Qualys. “By offering the Qualys Enterprise TruRisk Platform free for 30 days, organizations can avail of a solution that streamlines asset discovery, takes the guesswork out of understanding which vulnerabilities are the riskiest, and helps with prioritization, so they can mitigate risks quickly and efficiently to safeguard their businesses.”