Qualys previews TotalCloud FlexScan for multicloud security management

Vulnerability management seller Qualys this week announced the trial availability of its TotalCloud with FlexScan supplying, an agentless, cloud-native vulnerability detection and reaction system developed for use in multicloud and hybrid environments.

The application is developed to offer a holistic overview of an organization’s cloud-centered workloads and recognize recognized vulnerabilities. The system also scans workloads to look at no matter whether they’ve opened network ports, and monitors a host of other factors to offer a thorough picture of a business’ overall vulnerability status, tracking publicly exposed VMs (digital machines), databases, person accounts and exploitable vulnerabilities in public-dealing with assets.

The firm mentioned that quite a few of TotalCloud’s capabilities are developed to be no-code, enabling customers to use a GUI (graphical person interface) to execute advanced operational responsibilities such as quarantining assets and placing warn parameters, which would ordinarily require coding and be significantly a lot more time-consuming.

TotalCloud, Qualys included, is also intended as a devsecops instrument for developers, permitting them to recognize and suitable safety flaws at each step of the growth approach.

TotalCloud characteristics agentless design

One particular of TotalCloud’s most important providing details is its agentless style and design, that means that no computer software has to run on the monitored property, with the plan being that the software will not affect the workloads it is checking, in accordance to IDC team vice president for safety and rely on Frank Dickson.

“Agentless protection is a wonderful innovation to address imperfective approaches to software stability within just organizations,” he reported. “Essentially, agentless protection mitigates cross group conflict ensuing from developer objections as cloud functions is essentially inspecting the setting behind a virtual sealed pane of glass.”

What that also suggests, nonetheless, is that the agentless approach to safety is in essence based mostly on person snapshots of the techniques it’s protecting, not on ongoing, second-to-minute checking. In accordance to Dickson, this indicates that the program are unable to defend workloads that spin up momentarily and then shut back again down yet again concerning individuals snapshots.

“Additionally, agentless options simply cannot extract activity telemetry like system information and facts, L3/L4 connections activity, memory analysis or other serious time facts,” he pointed out. “Finally, you are quite limited in having action without an agent so response and remediation actions are restricted. A safety professional will be constrained in the capability to isolate a workload or redeploy a golden impression with out an agent.”

Qualys reported TotalCloud will be produced generally out there by the finish of 2022.