Cloud Platform
Platform
Solutions
Resources
Customers
Partners
Community
Support
Company
Login
Contact us
Try it
Asset Management
Vulnerability & Configuration Management
Risk Remediation
Threat Detection & Response
  • Overview

  • Platform Apps

  • Qualys Endpoint Security

    Advanced endpoint threat protection, improved threat context, and alert prioritization

  • Context XDR

    Extend detection and response beyond the endpoint to the enterprise

Compliance
Cloud Security
Cyber Risk Series | Cloud Security Edition | February 28 | Register Now

Qualys Continuous Monitoring.

A continuous monitoring tool that alerts you in real time about network irregularities.

Next-generation cloud service for identifying threats and monitoring unexpected network changes before they turn into breaches

Regional Medical Center

The Qualys Cloud Agent helps our medical center improve its vulnerability management efforts and achieve the real-time, continuous security the security team sought.

Information Security Analyst
Handling Cyber Operations a Large,
Regional Medical Center

Add custom alerts to your vulnerability assessment program for immediate response

Qualys Continuous Monitoring Highlights

Works with Qualys VM

Qualys Continuous Monitoring works in tandem with Qualys VMDR so that, from a single console, you can discover hosts and digital certificates, organize assets by business or technology function and be alerted as soon as vulnerabilities appear on your global perimeter. With Qualys CM, you can identify and proactively address potential problems.

Global monitoring

Qualys Continuous Monitoring lets you see your perimeter the way hackers do — directly from the Internet — and acts as a sentinel in the cloud, constantly watching your network for changes that could put you at risk. Qualys CM automates monitoring of your global perimeter, tracking systems in your global network, wherever they are.

Targeted alerts

Alerts can be tailored for a wide variety of conditions impacting systems, certificates, ports, services and software. Each rule can be configured to detect common, general changes or tuned to very specific circumstances. You can assign different recipients for each alert, so that the appropriate person is notified.

Immediate insights

The dashboard displays your network’s big-picture status at a glance, giving you a graphical representation of recent activity to spot anomalies. You can flag important alerts or hide trivial ones. A search engine lets you find specific alerts and drill into details with one click.

Combine continuous monitoring and vulnerability management

The deep, native integration between Qualys Continuous Monitoring and Qualys Vulnerability Management Detection Response generates a new approach to information security in which you continuously identify and proactively address potential problems, instead of waiting to respond to incidents.

A wizard guides you step by step in the process of setting up Qualys CM, including configuring your rulesets, your monitoring profiles and your notifications

  • MONITORING PROFILES: This defines where (i.e. which systems) you want to monitor. You can identify systems to monitor via asset tagging or by IP or by IP range
  • RULESETS: This defines what (i.e. which events) you want to monitor. For example, you can define rulesets to only monitor for new ports on non-Windows systems. These rulesets can be defined at a granular level so recipients get alerts only for events relevant to them
  • NOTIFICATIONS: This defines who (i.e. which individuals or teams) receive alerts. All alerts display on the Alerts Dashboard, but you can define subsets of alerts that go via email to specific individuals or distribution groups. You can define different distribution groups for different sets of alerts, and you can configure individual alerts or digests summarizing alerts over different timeframes

Be alerted right away about vulnerabilities, misconfigurations and other issues that can put you at risk of breaches, including:

  • UNEXPECTED HOSTS/OSes: Detects whenever systems appear, disappear, or are running unexpected operating systems. Alert recipients can quickly drill down to inspect all gathered data
  • EXPIRING SSL CERTIFICATES: Identifies certificates that have expired, are soon-to-expire, rogue or unknown — all of which are potential triggers to stop ongoing operations of your network’s services and applications
  • INADVERTENLY OPEN PORTS: Alerts you about newly opened ports, changes to ports, new services on ports, and closing of ports common vectors for attack and exploit
  • SEVERE VULNERABILITIES: Notes active, closed and re-opened vulnerabilities across your entire IT environment — on premises, in cloud instances and at mobile endpoints
  • REMEDIATION TICKETS: Informs you when remediation tickets are opened, resolved or closed, and lets you customize these rules with additional ticket, vulnerability and host criteria
  • UNDESIRED SOFTWARE: Flags installation of new or unauthorized software, upgrades or downgrades of existing software, and removals, all which can weaken the perimeter attack surface
Example of a daily alert email from Qualys Continuous Monitoring | Qualys, Inc.

Sharpen and streamline your network security

By constantly monitoring your network for changes that could put you at risk, Qualys CM gives you a comprehensive and up-to-date view of your IT environment, letting you reap a variety of benefits, including:

  • Unparalleled breach prevention

    • Discover threats and unexpected changes before hackers do
    • Know what hackers can see on your perimeter and internal IT assets
    • Get alerted to anomalies in your critical assets
    • Mitigate vulnerabilities before they get exploited

  • Outage prevention

    • Catch expiring SSL certificates before service gets disrupted
    • Apply alerting policies consistently across all your perimeter systems

  • Time and money savings

    • Quickly identify highest priorities for IT security teams
    • Target alerts for each issue to the people responsible for fixing them
    • Free security teams from sifting through long reports

  • Regulatory compliance

    • Address mandates like NIST 800-53 that require continuous monitoring
    • Gain immediate visibility – without waiting for periodic scans
    • Reduce risk of system changes going unnoticed
    • Boost auditors’ trust

Example of a daily alert email from Qualys Continuous Monitoring | Qualys, Inc.
Ruleset Builder in Qualys Continuous Monitoring | Qualys, Inc.

Customize alerts

For continuous monitoring and quick detection of security and compliance problems to be effective, it’s also necessary that the appropriate staffers be notified, so that prompt action can be taken. Email notifications feature intuitive layouts and are rich in context and content, giving recipients a succinct yet complete account of events.

  • Leveraging a policy engine, notifications are sent to specific first responders on operations teams responsible for priority assets requiring remediation

  • Multiple intervals can be set for event notification, matching them to criticality levels, so that alerts for the most important events will be triggered right away, and on the other extreme, low level incidents are communicated once a day, or once a week

  • Alerts can be sent to people who are not authorized users of Qualys services but who nonetheless should be aware about urgent vulnerabilities or other important issues

  • Alert rules can be configured for common, general scenarios, or specific ones, and for multiple conditions affecting a variety of assets and elements

  • Security teams are freed from the delays and burdens of waiting for scheduled scanning windows and from sifting through long reports

  • Email notifications display the number of new alerts for each category in your selected timeframe. Alerts are also grouped by category. For each alert, you will see the impacted host’s IP address and hostname as well as other event specific details, such as the vulnerability detected, software added or open ports.

  • Using the Qualys CM API (application programming interface), you can integrate Qualys CM alerts with your Security Information and Event Management (SIEM) solutions

Ruleset Builder in Qualys Continuous Monitoring | Qualys, Inc.
Alerts view in Qualys Continuous Monitoring | Qualys, Inc.

Immediate Insights

Qualys CM’s dashboard gives you a panoramic, comprehensive, graphics-rich, high-level view of your network, and lets you filter alerts in several ways. You can filter by category — such as Certificate, Host and Vulnerability) — and see all alerts that are configured and applicable within your environment. You can filter by date, so you get all alerts generated within a specified timeframe. These other dashboard features let you:

  • Closely monitor your security posture, issues and trends

  • Create customizable reports and views

  • Quickly and easily identify problem areas

  • Search alerts to, for example, get a historic view of events leading up to the current alert, or for forensic research

  • Make precise, informed decisions about appropriate actions to take by calling up granular details, such as:

    • When and where an event occurred and what changes were involved
    • What other alerts have been generated about the host involved in the incident, to help you correlate multiple alerts related to a single root cause. Host-level data available includes: vulnerabilities, new open ports, new or changed software

Alerts view in Qualys Continuous Monitoring | Qualys, Inc.

Powered by Enterprise TruRisk Platform

Single-pane-of-glass UI

See the results in one place, in seconds. With AssetView, security and compliance pros and managers get a complete and continuously updated view of all IT assets — from a single dashboard interface. Its fully customizable and lets you see the big picture, drill down into details, and generate reports for teammates and auditors. Its intuitive and easy-to-build dynamic dashboards to aggregate and correlate all of your IT security and compliance data in one place from all the various Qualys Cloud Apps. With its powerful elastic search clusters, you can now search for any asset – on-premises, endpoints and all clouds – with 2-second visibility.

Centralized & customized

Centralize discovery of host assets for multiple types of assessments. Organize host asset groups to match the structure of your business. Keep security data private with our end-to-end encryption and strong access controls. You can centrally manage users’ access to their Qualys accounts through your enterprise’s single sign-on (SSO). Qualys supports SAML 2.0-based identity service providers.

Easy deployment

Deploy from a public or private cloud — fully managed by Qualys. With Qualys, there are no servers to provision, software to install, or databases to maintain. You always have the latest Qualys features available through your browser, without setting up special client software or VPN connections.

Scalable and extensible

Scale up globally, on demand. Integrate with other systems via extensible XML-based APIs. You can use Qualys with a broad range of security and compliance systems, such as GRC, ticketing systems, SIEM, ERM, and IDS.

Learn more about Enterprise TruRisk Platform

See for yourself. Try Qualys for free.

Start your free trial today. No software to download or install. Email us or call us at 1 (800) 745-4355.

Try it free