Qualys previews TotalCloud FlexScan for multicloud security management

So Farrare

Vulnerability administration seller Qualys this 7 days introduced the trial availability of its TotalCloud with FlexScan supplying, an agentless, cloud-indigenous vulnerability detection and reaction platform developed for use in multicloud and hybrid environments.

The computer software is designed to offer a holistic overview of an organization’s cloud-dependent workloads and recognize identified vulnerabilities. The system also scans workloads to test irrespective of whether they’ve opened community ports, and screens a host of other aspects to offer a comprehensive picture of a business’ general vulnerability position, tracking publicly uncovered VMs (digital equipment), databases, person accounts and exploitable vulnerabilities in community-facing assets.

The enterprise said that numerous of TotalCloud’s abilities are created to be no-code, allowing buyers to use a GUI (graphical person interface) to conduct sophisticated operational responsibilities these as quarantining belongings and environment warn parameters, which would ordinarily call for coding and be significantly far more time-consuming.

TotalCloud, Qualys additional, is also created as a devsecops tool for builders, permitting them to detect and suitable safety flaws at every single phase of the enhancement procedure.

TotalCloud options agentless design

1 of TotalCloud’s principal marketing details is its agentless structure, which means that no software package has to operate on the monitored belongings, with the idea being that the program won’t have an impact on the workloads it is monitoring, in accordance to IDC group vice president for safety and believe in Frank Dickson.

“Agentless stability is a wonderful innovation to deal with imperfective methods to application safety within organizations,” he said. “Essentially, agentless stability mitigates cross organization conflict ensuing from developer objections as cloud operations is basically analyzing the atmosphere behind a virtual sealed pane of glass.”

What that also signifies, even so, is that the agentless approach to security is primarily primarily based on person snapshots of the systems it is preserving, not on steady, second-to-minute monitoring. According to Dickson, this implies that the technique simply cannot guard workloads that spin up momentarily and then shut again down once more among these snapshots.

“Additionally, agentless solutions can not extract action telemetry like approach info, L3/L4 connections activity, memory examination or other genuine time details,” he famous. “Finally, you are extremely constrained in getting action without an agent so response and remediation actions are constrained. A stability experienced will be limited in the skill to isolate a workload or redeploy a golden picture with no an agent.”

Qualys mentioned TotalCloud will be made commonly available by the close of 2022.

Copyright © 2022 IDG Communications, Inc.

Next Post

Protection Against Ransomware 2022 Tips: Do these NOW!

For almost a decade — and counting — ransomware has been a massive security headache for individuals and businesses alike. More than just some malicious codes, it’s now considered a type of terrorism or a weapon of war. The good news is that you can prevent ransomware without spending any […]