Qualys previews TotalCloud FlexScan for multicloud security management

Vulnerability management seller Qualys this week introduced the demo availability of its TotalCloud with FlexScan giving, an agentless, cloud-indigenous vulnerability detection and reaction system made for use in multicloud and hybrid environments.

The software program is created to deliver a holistic overview of an organization’s cloud-based workloads and recognize acknowledged vulnerabilities. The system also scans workloads to check whether or not they’ve opened community ports, and screens a host of other things to present a in depth photograph of a business’ total vulnerability position, tracking publicly exposed VMs (digital devices), databases, user accounts and exploitable vulnerabilities in public-dealing with assets.

The business stated that several of TotalCloud’s abilities are created to be no-code, permitting consumers to use a GUI (graphical user interface) to perform complex operational duties this sort of as quarantining property and environment inform parameters, which would ordinarily require coding and be a lot a lot more time-consuming.

TotalCloud, Qualys extra, is also intended as a devsecops tool for builders, making it possible for them to establish and accurate security flaws at each and every stage of the progress course of action.

TotalCloud capabilities agentless structure

One of TotalCloud’s primary offering points is its agentless structure, indicating that no computer software has to run on the monitored assets, with the notion getting that the software program won’t have an effect on the workloads it is checking, according to IDC group vice president for stability and have faith in Frank Dickson.

“Agentless stability is a great innovation to tackle imperfective ways to software security inside businesses,” he explained. “Essentially, agentless stability mitigates cross firm conflict resulting from developer objections as cloud operations is effectively examining the surroundings guiding a virtual sealed pane of glass.”

What that also indicates, even so, is that the agentless approach to safety is in essence dependent on unique snapshots of the programs it is shielding, not on ongoing, instant-to-minute checking. According to Dickson, this usually means that the method can not guard workloads that spin up momentarily and then shut back again down yet again amongst individuals snapshots.

“Additionally, agentless solutions are not able to extract exercise telemetry like course of action data, L3/L4 connections exercise, memory investigation or other serious time facts,” he mentioned. “Finally, you are quite constrained in taking motion with out an agent so reaction and remediation actions are confined. A stability skilled will be restricted in the capacity to isolate a workload or redeploy a golden graphic without having an agent.”

Qualys reported TotalCloud will be designed typically out there by the finish of 2022.