Public Cloud Integrations for Security and Compliance

Total visibility of your public cloud deployments.

Cloud computing platform providers operate on a “shared security responsibility” model, meaning you still must protect your workloads in the cloud. Qualys can help.

Identify, classify, and monitor assets and vulnerabilities
Comply with internal and external policies
Prioritize vulnerability remediation
Automatically find and eradicate malware infections on your websites

Security and compliance via native integrations

For Amazon Web Services (AWS)
For Microsoft Azure
For Google Cloud Platform
For Oracle Cloud Infrastructure

Qualys + AWS Highlights

Complete visibility, and end-to-end IT security and compliance of your AWS deployments and hybrid IT.

Built for AWS with Transparent Orchestration^TM

Qualys’ offerings for AWS follow our Transparent Orchestration principle: They simplify AWS security by eliminating friction, and making it intuitive and automated. We accomplish that via Qualys’ native integration with AWS.

2-second visibility across all workloads and PaaS resources

Qualys provides instant, full visibility into your AWS deployments, with details on how instances are being secured and what workloads and resources are running on them.

Continuous assessment of your global security and compliance posture

Qualys continuously monitors and assesses your AWS assets and resources for security issues, misconfigurations and non-standard deployments.

Identify zero-day vulnerabilities and compromised assets

With Qualys, you can continuously detect vulnerabilities, including zero-day bugs being exploited in the wild, pinpoint the AWS assets requiring immediate fixes and prioritize remediation.

Visibility of your AWS deployments

Total visibility of your AWS cloud infrastructure and workloads through a central “single-pane-of-glass” interface.

360-degree view of all AWS assets across multiple accounts, regions from a centralized UI
Lower cost
Ease of use
Nothing to install or manage

Qualys AssetView - AWS EC2 Workload Security Overview

AWS workload security

Improve risk detection, prevention and response by performing a full set of security and compliance checks on your EC2 Instances, databases and web applications.

Vulnerability management
Policy compliance
File integrity monitoring
Indication of compromise
Web app scanning / firewall
Asset inventory and assessment
Other critical tasks

Qualys CloudView - Monitor Amazon Web Services view

AWS infrastructure security

Monitor and assess your AWS environment against the CIS (Center for Internet Security) AWS Foundations Benchmark. Identify threats caused by misconfigurations, unauthorized access, and non-standard deployments. Get access to clear remediation recommendations so that you can maintain a solid security posture across your AWS resources like VPC, Security Groups, S3, IAM Users and RDS through automated, continuous assessments.

AWS container security

Qualys Container Security (CS) provides security coverage from the build to the deployment stages. Monitor and protect container-native applications on AWS without disrupting your existing Continuous Integration and Deployment (CI/CD) pipelines. Assess the contents of container images for vulnerabilities, control which images are deployed, gain visibility into runtime application activity, and also automatically enforce normal application behavior.

Qualys CS detects vulnerabilities and compliance issues with Docker images in the build pipeline and in AWS ECR, identifies behavioral anomalies and protects container runtimes deployed on AWS ECS, EKS and Fargate.

AWS Security Hub integrated with Qualys Vulnerability Management

Native integration with AWS Security Hub

Natively integrate findings from the Qualys Vulnerability Management, Policy Compliance and Cloud Security Assessment apps into AWS Security Hub. Get real-time visibility into your security and compliance posture directly in the AWS console. Benefit from insights gained from the correlation of Qualys information with other data in AWS Security Hub to enable faster detection and prioritization of risks in AWS environments, enabling rapid automated remediation actions.
Learn more

DevOps security in AWS

Enterprise TruRisk Platform, with its robust APIs and native integrations with key DevOps tools, lets you build security into every function in the CI/CD tool chain. This allows developers and ops staff to do security checks, and enables security teams to provide support at the pace of DevOps. Qualys Cloud Agents can be easily embedded into the AMIs or installed on instances. This gives you an ideal way to integrate security at the source and provide complete visibility for elastic cloud workloads. Learn how our customers have implemented secure DevOps, and how you can do it as well.

Graviton ready

The Graviton Ready Qualys Cloud Agent provides customers cost savings on AWS’s Graviton2 ARM architecture while leveraging Qualys’ innovative Cloud Platform to protect their critical assets with integrated IT, compliance, and security. The Qualys Cloud Agent enables instant, global visibility of IT assets – with up-to-date asset configuration data for security, compliance, and response.

How we secure AWS

Enterprise TruRisk Platform sensors are always on, giving you continuous 2-second visibility of all your AWS assets. Remotely deployable, centrally managed and self-updating, the sensors come as physical or virtual appliances, or lightweight agents. Qualys Container Security and Web Application Firewall complement the sensors.

AWS Connector

Sync AWS EC2 instances, resources and their associated metadata

Virtual Scanners

Remotely scan instances across VPCs and Regions with pre-authorized scanners

Cloud Agents

Collect data in real time with our lightweight agent

Learn more

Internet Scanners

Perform fast and efficient external scans

Container Security

Assess and monitor container security and compliance

Learn more

Learn more about Qualys TotalCloud

Qualys + Azure Highlights

Complete visibility, and end-to-end IT security and compliance of your hybrid Azure deployments across Azure and Azure Stack.

Built for Azure with Transparent Orchestration^TM

Qualys’ offerings for Azure follow our Transparent Orchestration principle: Simplified Azure security through frictionless deployment, intuitive design and automation. The Qualys native integration with Azure makes this possible.

2-second visibility across all workloads and resources

Qualys provides instant, full visibility into your Azure deployments, with details on how virtual machines are being secured and what workloads and resources are running on them.

Continuous assessment of your global security and compliance posture

Qualys continuously monitors and assesses your Azure assets and resources for security issues, misconfigurations and non-standard deployments.

Identify zero-day vulnerabilities and compromised assets

With Qualys, you can continuously detect vulnerabilities, including zero-day software holes being exploited in the wild, pinpoint the Azure assets requiring immediate fixes and prioritize remediation.

Obtain visibility of your Azure deployments

Gain visibility, security and continuous compliance across your Azure public cloud, Azure Stack private cloud and hybrid infrastructure and workloads from a single-pane interface. Using the same Enterprise TruRisk Platform apps, sensors and analysis engine for both Azure and Azure Stack yields benefits such as:

360-degree view of all Azure assets from a centralized UI
Lower cost
Ease of use

Microsoft Azure and Enterprise TruRisk Platform workflow diagram

Qualys AssetView - Azure Cloud Workload Security Overview

Secure workloads in Azure

Improve risk detection, prevention and response by performing a full set of security and compliance checks on your Azure virtual machines, databases and web applications.

Vulnerability management
Policy compliance
File integrity monitoring
Endpoint Detection & Response
Web app scanning / firewall
Other critical tasks

Qualys CloudView - Monitor Microsoft Azure view

Assess Azure infrastructure security configuration

Monitor and assess your Azure environment against the CIS (Center for Internet Security) Microsoft Azure Foundations Benchmark. Identify threats caused by misconfigurations, unauthorized access, and non-standard deployments. Through automated, continuous assessments and clear remediation recommendations, you can maintain a solid security posture across your Azure resources like Virtual Networks, Network Security Groups, SQL Servers, and Storage Blobs.
Learn more

Secure container deployments

Qualys Container Security (CS) provides security coverage from the build to the deployment stages. It lets you monitor and protect container-native applications on Azure without disrupting your existing Continuous Integration and Deployment (CI/CD) pipelines. With Qualys CS, you can assess the contents of container images for vulnerabilities, control which images are deployed, gain visibility into runtime application activity, and also automatically enforce normal application behavior.

Qualys CS detects vulnerabilities and compliance issues with Docker images in the build pipeline and in Azure Container Registry, identifies behavioral anomalies and protects container runtimes deployed on AKS and Azure Container Instances.
Learn more

Integrate with Azure Security Center

Azure Security Center – a unified security management and monitoring console – now detects Azure virtual machines and automatically deploys the lightweight Qualys Cloud Agents on them. The agents gather vulnerability data and send it to the Enterprise TruRisk Platform, which in turn provides vulnerability and system health monitoring data back to Azure Security Center.

DEMO: Security built in Azure – not bolted on (02:59)
VIDEO: Integrating Qualys with Microsoft Azure Security Center (04:54)

Qualys Vulnerability Management - Azure Stack Report window

Secure Azure Stack infrastructure and workloads

Qualys assesses the security and compliance posture of Azure Stack, the version of Azure designed for on-premises deployments. You can either deploy Qualys Virtual Scanner Appliances or Qualys Cloud Agents to assess Azure Stack’s control plane infrastructure and workloads.
Learn more

How we secure Azure

We use Enterprise TruRisk Platform sensors, which are always on, giving you continuous 2-second visibility of all your Azure assets. Remotely deployable, centrally managed and self-updating, the sensors come as physical or virtual appliances, or lightweight agents. Qualys Container Security and Web Application Firewall complement the sensors.