{"id":4975,"date":"2018-03-11T19:31:41","date_gmt":"2018-03-11T11:31:41","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4975"},"modified":"2018-03-11T19:42:50","modified_gmt":"2018-03-11T11:42:50","slug":"qualysguard-vulnerability-management-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2018\/03\/qualysguard-vulnerability-management-tool\/","title":{"rendered":"QualysGuard &#8211; Vulnerability Management Tool"},"content":{"rendered":"<p>QualysGuard is a web-based vulnerability management tool provided by Qualys, Inc, which was the first company to deliver vulnerability management services as a SaaS-based web-service.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2018\/03\/QualysGuard-Vulnerability-Management-Tool-640x479.png\" alt=\"QualysGuard - Vulnerability Management Tool\" width=\"640\" height=\"479\" class=\"aligncenter size-medium wp-image-4977\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2018\/03\/QualysGuard-Vulnerability-Management-Tool-640x479.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2018\/03\/QualysGuard-Vulnerability-Management-Tool-1024x766.png 1024w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2018\/03\/QualysGuard-Vulnerability-Management-Tool.png 1163w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>From reviews, it seems like a competent tool with a low rate of false positives that is fairly easy to work with and keep the more &#8216;dangerous&#8217; parts of vulnerability scanning out of the hands of users, but with the flexibility for expert users to do what they need.<\/p>\n<p>It would be up against other tools like Nessus, Retina, nCircle, <a href=\"https:\/\/www.darknet.org.uk\/2017\/09\/rapid7-nexpose-community-edition-free-vulnerability-scanner\/\">NeXpose<\/a> and Tenable.<\/p>\n<h2>Features of QualysGuard Scanner<\/h2>\n<p>The apps&#8217; capabilities include:<\/p>\n<ul>\n<li>Asset discovery and inventory<\/li>\n<li>Vulnerability management<\/li>\n<li>Remediation prioritization<\/li>\n<li>Compliance monitoring<\/li>\n<li>Container security<\/li>\n<li>Web application scanning and firewall<\/li>\n<li>File integrity monitoring<\/li>\n<li>Indication of compromise and more<\/li>\n<\/ul>\n<p>It can also handle internal scans using Qualys appliances which can communicate back the cloud-based system, which makes it very scalable.<\/p>\n<h3>About Qualys<\/h3>\n<p>Qualys was founded in 1999. The company launched QualysGuard in December 2000, making Qualys one of the first entrants in the vulnerability management market. The QualysGuard Intranet Scanner was released in 2002 to automatically scan corporate LANs for vulnerabilities and search for an available patch. The following year, Qualys released FreeMap, a web-based tool for scanning, mapping and identifying possible security holes within networks connected to the Internet.<\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>In 2005, Qualys extended its QualysGuard product line. In 2008, Qualys introduced QualysGuard Policy Compliance, which extended the platform\u2019s global scanning capabilities to collect IT compliance data across the organization and map this information into policies to document compliance for auditing purposes.<\/p>\n<p><strong><em>Source:<\/em><\/strong> <a href=\"https:\/\/en.wikipedia.org\/wiki\/Qualys\">Wikipedia<\/a><\/p>\n<p>QualysGuard pricing should start from around $2000 a year onwards, but no prices are made public and the latest information I could find was from 2014 ($2,495 per year, which provides scanning services for web applications on eight external IP addresses and PCI compliance reporting; $5,495 per year gets into the meat of the product giving subscribers scan coverage for 256 IPs and a virtual scanning appliance).<\/p>\n<p>You can read more on the Qualys website <a href=\"https:\/\/www.qualys.com\/qualysguard\/\">here<\/a>, there is a free trial.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>QualysGuard is a web-based vulnerability management tool provided by Qualys, Inc, which was the first company to deliver vulnerability management services as a SaaS-based web-service. From reviews, it seems like a competent tool with a low rate of false positives that is fairly easy to work with and keep the more &#8216;dangerous&#8217; parts of vulnerability [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"QualysGuard is a web-based vulnerability management tool provided by Qualys, Inc, which was the first company to deliver vulnerability management services as a SaaS-based web-service.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[11],"tags":[10675],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4975"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=4975"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4975\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=4975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=4975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=4975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}