Qualys VMDR Features

Management (3)

Governance: Allows users to create, edit, and relinquish user access privileges.
Logging and Reporting: Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.
API / Integrations: Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Anomaly Detection: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Security Auditing: Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Cloud Gap Analytics: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Risk Scoring: Provides risk scoring for suspicious activity, vulnerabilities, and other threats.
Secrets Management: Provides tools for managing authentication credentials such as keys and passwords.
Security Auditing: Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Configuration Management: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Policy Enforcement: Allows administrators to set policies for security and data governance.
Auditing: Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.
Workflow Management: Creates new or streamlines existing workflows to better handle IT support tickets and service.

Continuous Image Assurance: Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats.
Behavior Monitoring: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.
Observability: Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.

Dynamic Image Scanning: Scans application and image source code for security flaws without executing it in a live environment
Runtime Protection: Monitors container activities and detects threats across containers, networks, and cloud service providers.
Workload Protection: Protects compute resources across a networks and cloud service providers. Serves as Firewall and prompts additional authentication for suspicious users.
Network Segmentation: Allows administrative control over network components, mapping, and segmentation.

Compliance Monitoring: Monitors data quality and sends alerts based on violations or misuse.
Anomoly Detection: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Cloud Gap Analytics: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Issue Tracking: Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
Detection Rate: The rate at which scans accurately detect all vulnerabilities associated with the target.
False Positives: The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Automated Scans: Runs pre-scripted vulnerability scans without requiring manual work.

Compliance Testing: Allows users to scan applications and networks for specific compliance requirements.
Perimeter Scanning: Analyzes network devices, servers and operating systems for vulnerabilities.
Configuration Monitoring: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Manual Application Testing: Allows users to perfrom hands-on live simulations and penetration tests.
Static Code Analysis: Scans application source code for security flaws without executing it.
Black Box Testing: Scans functional applications externally for vulnerabilities like SQL injection or XSS.

Risk Scoring: Identifies and scores potential network security risks, vulnerabilities, and compliance impacts of attacks and breaches.
Reporting: Creates reports outlining log activity and relevant metrics.
Risk-Prioritization: Allows for vulnerability ranking by customized risk and threat priorities.

Vulnerability Scanning: Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence: Stores information related to common vulnerabilities and how to resolve them once incidents occur.
Contextual Data: Identify risk data attributes such as description, category, owner, or hierarchy.
Dashboards: Provides the ability to create custom reporting dashboards to further explore vulnerability and risk data.

Automated Remediation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Workflow Automation: Streamlines the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Security Testing: Allows users to perfrom hands-on live simulations and penetration tests.
Test Automation: Runs pre-scripted vulnerability scans and security tests without requiring manual work.