Customers gain superior visibility with
Frontier AI models discover software vulnerabilities faster than any security team can triage by hand, and adversaries have access to the same capability. Yet most security programs remain split across dozens of tools, each with its own severity score and no shared view of what is actually exploitable. In this environment, finding more vulnerabilities only deepens the backlog. The problem is compounded since many of the fastest-growing parts of the attack surface are also the least measured. Phones, connected devices, industrial and medical systems, and identities often cannot run a traditional agent or tolerate active scanning, so their risk goes unmeasured or sits in a separate tool with its own scoring.
Through the expanded technology alliances, partner telemetry flows into Qualys ETM where TruRisk,
Organizations benefit from measuring risk across these major attack surfaces in Qualys ETM:
- Mobile (Lookout and NowSecure) – Provides continuous visibility into mobile device security posture, OS vulnerabilities, and application-level risks identified through advanced binary analysis, including vulnerabilities in embedded third-party SDKs. By incorporating these risks into a unified TruRisk score, organizations can consistently assess and prioritize mobile exposure alongside traditional endpoints, including servers and laptops.
- OT and IoT (Claroty and
Nozomi Networks ) – Integrates passive asset discovery and vulnerability data for operational technology (OT) and internet of things (IoT) such as industrial control systems, medical devices, and building management systems. Exposures that cannot be scanned or patched become visible and prioritized, with compensating mitigations tracked in the same remediation workflow. - Identity (Okta) – Incorporates identity posture telemetry, such as misconfigured, over-privileged or exposed accounts and credentials. An at-risk account is weighed alongside the systems it can reach, so teams fix the exposures an attacker would use to move laterally.
New partner authorization tracks for the Global mROC Alliance
The invite-only Global mROC Alliance now certifies partners across three Partner Roles, so customers can engage the right partner at every stage of ROC adoption — from strategy to deployment to fully managed operations:
- Authorized mROC Advisor (new) – Certified to assess a customer's risk program, define TruRisk-based priorities, and design the customer's ROC operating model and adoption roadmap.
- Authorized mROC Delivery & Implementation Partner (new) – Certified to deploy ETM, integrate it with the customer's existing security stack, including third-party findings and technology alliance telemetry, and stand up ROC workflows.
- mROC Partner – Certified to run the customer's ROC as a managed service on ETM, from prioritization through remediation and SLA-based reporting.
"PHP2Shell was a wake-up call for the industry. The vulnerability existed for years, but AI dramatically changed the economics of discovery and exploitation, enabling adversaries to weaponize exposures at a speed that far exceeds traditional response cycles," said
Additional Resources
- Read our blog post, "The Expanding Attack Surface Demands a New Operating Model"
- Watch the video, "
Qualys x Partners: Turning Vulnerabilities into a Business Risk Conversation" - Learn more about the Qualys Global mROC Alliance
- Follow
Qualys on LinkedIn, Instagram and X
About Qualys
Qualys, Inc. (NASDAQ: QLYS) is a leading cloud-native cyber risk management company, helping organizations measure, communicate, and eliminate cyber risk. The Qualys platform and its solutions power the Risk Operations Center (ROC), unifying asset visibility, exposure management, risk prioritization, and remediation to help organizations continuously reduce risk across hybrid, multi-cloud, endpoint, and AI environments. Qualys equips security and IT teams for the Frontier AI Era with AI-speed detection, hyper-prioritization, and autonomous remediation. Trusted by more than 10,000 organizations globally, including most of the Fortune 100, Qualys helps customers transform cybersecurity into a measurable business function that strengthens resilience and drives business outcomes. For more information, visit www.qualys.com.
Media Contact:
Rachel Yap Winship
Qualys
Media@Qualys.com
View original content to download multimedia:https://www.prnewswire.com/news-releases/qualys-expands-global-mroc-alliance-with-new-technology-alliances-across-every-major-attack-surface-and-partner-certification-tracks-302932770.html
SOURCE Qualys, Inc.