Next-Gen Enhancements Strengthen Identity Security, Threat Prioritization, and Exploit Validation
Mumbai, October 17, 2025 – Qualys, Inc. (NASDAQ: QLYS), a global leader in cloud-based IT, security, and compliance solutions, has announced major advancements to its Enterprise TruRisk Management (ETM) platform. The updates, revealed at Qualys’ Risk Operations Conference (ROCon) in Houston, introduce new AI-driven features that help organizations predict and prevent cyber threats with precision and measurable impact.
The expanded ETM platform now integrates Identity Security, Industry-Specific Threat Prioritization, and Exploit Validation, empowering enterprises to anticipate, quantify, and mitigate risks before breaches occur.
AI-Driven Security for an Evolving Threat Landscape
The rapid rise of agentic AI has dramatically increased both the scale and complexity of cyberattacks, creating new challenges for already-stretched security teams. To counter this, Qualys ETM unifies Identity Risk Posture Management, contextual threat intelligence, and exposure exploitability validation within a Risk Operation Center (ROC) framework, enabling organizations to demonstrate provable risk reduction at scale.
“Enterprises today need advanced solutions to address growing risks from AI-driven threats,” said Tyler Shields, Principal Analyst at Omdia. “Qualys’ latest enhancements will help security teams operate with greater precision and efficiency for measurable risk reduction.”
ETM Identity: Strengthening Human and Non-Human Identity Security
ETM Identity introduces proactive protection against both human and non-human identity risks. By unifying visibility and remediation across all IAM systems—including Active Directory, Microsoft Entra ID, and major cloud IdPs—the solution delivers a consolidated Identity TruRisk™ score.
This unified view enables teams to:
-
Identify high-risk service and machine identities.
-
Target lateral movement paths exploited in breaches.
-
Automate remediation workflows for verified risk reduction.
“Identity risk has become one of the most exploited and least visible threats today,” said Corey Amsler, Director of Risk Management at GE Vernova. “No effective exposure management strategy is complete without aligning identity risk with asset risk.”
TruLens: Real-Time Threat Intelligence Tailored to Your Industry
TruLens empowers organizations with real-time, adaptive threat intelligence that prioritizes vulnerabilities based on actual business impact. It continuously enriches exposure data—such as CISA KEV vulnerabilities—with live threat feeds and asset context to ensure focus on what truly matters.
Key benefits include:
-
Dynamic re-ranking of vulnerabilities using industry-specific insights.
-
Mobile access for decision-makers on the go.
-
Faster, more accurate response prioritization across the organization.
TruConfirm: Validating Exploitability Before Attackers Do
TruConfirm provides proactive confirmation of vulnerability exploitability, simulating real-world attack scenarios safely. This feature validates which exposures are truly exploitable and where security controls may be failing.
Once exploitability is confirmed, ETM automatically:
-
Orchestrates patching or mitigation via ITSM workflows.
-
Verifies remediation effectiveness.
-
Updates the TruRisk™ score for continuous accuracy.
Together, TruConfirm and TruLens ensure remediation efforts are laser-focused on exposures that deliver immediate and meaningful risk reduction.
Leadership Perspective: AI-Driven Clarity for Security Leaders
“Agentic AI is transforming cybersecurity and forcing organizations to rethink risk management,” said Sumedh Thakar, President and CEO of Qualys.
“With expanded verification for user identities and exploit validation, ETM provides the clarity and precision leaders need to measure, communicate, and eliminate cyber risk in verifiable ways.”
Availability
Qualys ETM is now generally available.
ETM Identity, TruLens, and TruConfirm are currently in preview.
Organizations can sign up for early access at:
👉 qualys.com/free-trial-new/enterprise-trurisk-management
About Qualys
Founded in 1999, Qualys, Inc. (NASDAQ: QLYS) is a pioneer in cloud-based security, compliance, and IT solutions, serving over 10,000 customers worldwide, including most of the Forbes Global 100 and Fortune 100.
The Qualys Enterprise TruRisk Platform leverages a single agent to deliver continuous visibility, automation, and protection across on-premises, cloud, container, and mobile environments.
Strategic integrations with AWS, Microsoft Azure, Google Cloud, and Oracle Cloud Infrastructure make Qualys a cornerstone in global cybersecurity ecosystems.
For more information, visit www.qualys.com.
Additional Resources
-
Blog: Bringing the Power of Agentic AI for Identity Risk, Adaptive Threat Prioritization, and Exposure Exploitability Validation
-
Learn More: qualys.com/etm
-
Free Trial: qualys.com/free-trial-new/enterprise-trurisk-management
-
Webinar: Extending Your Risk Operations Center with Qualys ETM Identity
-
Follow: Qualys on LinkedIn, Instagram, and X (Twitter)
