Jerry’Loss

0 Comments | Wireless News, Jul 30, 2010

Qualys, Inc., a provider of on demand IT security risk and compliance management solutions, announced that QualysGuard Vulnerability Management (VM) now includes correlated exploitability information from real-time feeds to provide customers with up-to- date references to exploits and related security resources.

With this new feature, the company said customers running vulnerability scans can view the latest correlated exploits from third party vendors including Core Security, Immunity, and related exploit information from Metasploit and The Exploit-DataBase. This helps customers to prioritize remediation activities according to risk assessment performed by the correlated running exploits.

Previously, when running vulnerability scans, customers would get a list of Common Vulnerabilities and Exposures (CVEs), and have to manually look up exploits for each CVE, taking up the time and energy of security staff or consultants. Now, QualysGuard VM scans automatically, producing a list of correlated exploits for each CVE, using databases of tested exploits from Core Security, Immunity, The Exploit-DataBase or Metasploit, enabling customers to assess the impact of each vulnerability from a risk standpoint, helping them prioritize their remediation plans. The exploit information can also be included in scanning reports, providing a more complete view of security risk. Customers who use these penetration testing tools can also produce actionable reports to apply the exploits on target hosts.

“Qualys’ work with leading penetration test vendors eliminates the manual process of linking vulnerabilities to exploits,” said Wolfgang Kandek, CTO of Qualys. “This provides security professionals and consultants a clearer view of the exploitability of their IT assets so they can spend more time remediating issues and proactively planning their security strategies.”

“For years Core has lead the way in the integration between scanning and security testing solutions, and customers have been using the integration between QualysGuard and IMPACT Pro to enhance and improve their vulnerability management processes,” said Fred Pinkett, vice president of product management at Core Security. “This new level of information available will provide QualysGuard users with more valuable and useful information to help prioritize remediation and make their security programs more effective and efficient.”

“With today’s growing threat landscape and corporate adoption of new computing architectures, it is more important than ever to proactively plan security measures to protect valuable company data,” said Justine Aitel, CEO for Immunity
dating