Shellshock: Detect and Defend with Qualys

IT infrastructure is becoming increasingly hybrid, organizations not only have on-premises datacenter hosts and applications, but they also have cloud-based workloads and instances. IT DevOps teams are leveraging containerized environments and emerging technologies. To stay ahead of the changing threat landscape, security teams need to adapt their cybersecurity practices to shift left and build security in, and not bolt it on.

In this webinar, CIS Chief Product Architect, Adam Montville, and CIS Benchmarks Product Owner, Michelle Peterson, from the Center for Internet Security, will focus on how CIS Benchmarks help organizations improve cybersecurity by implementing security controls and recommendations that are a foundation of security hygiene. Hariom Singh, Director, Product Management, Compliance Solutions for Qualys, will discuss how organizations can implement proactive best practices at scale for real-time inventory, security hygiene, and contextual prioritization of threats to ultimately reduce time to remediation.

For many organizations, today’s vulnerability management programs involve different teams, disjointed solutions and inability to prioritize the most serious threats. Qualys VMDR provides an all-in-one, cloud-based app that unifies the vulnerability management process, with built-in:

- Asset inventory: know everything on your hybrid network
- Vulnerability assessment: identify all vulnerabilities
- Threat prioritization: surface the most serious threats
- Remediation: identify and deploy needed patches

Join this webinar to learn about the next generation of vulnerability management, and why Ovum declares “With VMDR, organizations can finally complete the vulnerability cycle within a single UI, delivering on the promise of driving Time to Remediation toward zero.”

Qualys webinar offers point-by-point rebuttal of false Rapid7 claims about VMDR.

At this critical time, when the capability of businesses to fend off hackers has been significantly reduced, and companies are suddenly grappling to secure a fully remote workforce, security professionals need the most factual, accurate information possible. Unfortunately, Rapid7 has chosen this time to launch fabricated claims against Qualys VMDR in a marketing program titled, “It’s Time to Quit Qualys: 10 reasons why Rapid7 is worth the switch.”

Join Philippe Courtot, CEO and Chairman at Qualys, and Sumedh Thakar, Chief Product Officer and President at Qualys, for a fact-based, point-by-point rebuttal.

In addition, Philippe and Sumedh will discuss how VMDR is changing the IT and Security industry.

Vulnerabilities continue to increase in number and severity, leaving security and IT teams overloaded with alerts and systems to patch. The future of Vulnerability Management must provide true, risk-based prioritization of threats and unify the entire vulnerability workflow - from discovery to remediation.

In this webinar, Brian Kime, Security and Risk Senior Analyst at Forrester, will discuss the challenges security and IT operations teams face. He’ll cover the need for prioritization and how to speed response and remediation for the most critical vulnerabilities. Prateek Bhajanka, Vice President, Product Management for Qualys, will present an integrated approach to  Vulnerability Management, Detection and Response (VMDR) that accelerates remediation and drastically reduces cost.

Qualys Partner Webcast will provide an introduction to the game-changing VMDR offering and share important updates on the Qualys Partner Program. VMDR (Vulnerability Management, Detection and Response) provides customers with an all-in-one, cloud-based application that seamlessly unifies the workflow to scan, investigate, prioritize and patch vulnerabilities.


Agenda

Partner and Qualys Platform Updates
- Partner Portal Launch
- Cloud Integrations: Google Cloud ,Microsoft Azure and AWS
- Qualys Platform Deployment in Canada, PCP Updates

QSC San Francisco February 2020
- Unveiling VMDR — A Game Changer for Vulnerability Management
- Qualys EDR — Going Well Beyond Your EDR Solution
- Qualys Security Data Lake and Analytics Cloud Platform

Qualys Cloud Platform live Demo
- Asset Inventory  — Up-to-Date, Real-Time View of Your Global IT Assets
- Patch Management — Complete the Vulnerability Management Lifecycle with Patch Management
- Container Security  — Securing Cloud and Container Workloads

Containers are the most sought after development tool for microservices. Their simplicity and portability allow DevOps to create true agile builds within development cycles. However, this new kind of environment brings new set of security threats at every phase of this cycle—from unvalidated software entering the environment, to secrets being leaked, to runtime drifting and breaking immutable behaviors.

By outlining common security risks and practical use cases across every phase, this session helps security teams better understand how to efficiently manage security at the speed and scale of DevOps.

In this webcast, you will also learn:

- Security use cases at Build, Registry, and Runtime for containers
- Importance of visibility into your container assets
- Need for container-native vulnerability analysis
- Strategies to detect and address drifting runtimes

Ths webcast will also include a live demo and Q&A with the speaker.

Risk management in the age of DevOps and public clouds requires organizations to automate real-time visibility and tracking of their SSL certificate deployments. However, doing this is a challenge amidst the scale, speed and elasticity of assets and certificates in today's enterprise.

Learn how Qualys CertView helps customers extend DevSecOps to prevent downtime and disruption, audit and compliance failures, and mitigate risks associated with expired or weak certificates and vulnerable TLS configurations.

Real-time change detection has become a critical element of maintaining operational hygiene across rapidly changing assets typical of DevOps infrastructure.

This talk will introduce how Qualys File Integrity Monitoring identifies and tracks change incidents across global IT environments. Learn how customers are using FIM to efficiently correlate events, quickly identify and filter out noise, and track review of incidents to meet compliance requirements."

High profile breaches are contributing to an increasingly regulatory environment, both regionally and globally. This talk highlights the latest IT security and compliance challenges and discusses best practices to streamline compliance and risk programs using the Qualys Cloud Platform and its integrated Apps.

Learn how to assess security configurations of IT systems, wherever they reside, log and track file changes across IT systems globally, help security teams implement the CIS 20 Critical Security Controls. automate collection and reporting of compliance data for both technical and non-technical controls and automate and standardize vendor risk assessment.

Also, learn how companies in and outside of the EU can assess and maintain compliance with the EU's General Data Protection Regulation (GDPR).

The need to test web applications and APIs for vulnerabilities in an automated fashion is greater than ever. Testing resources are scarce and new code is being written at breakneck speed while the business wants it deployed to production immediately.

Learn about new tools and capabilities in Qualys Web Application Scanning (WAS) that are being introduced to help you integrate application security testing into this fast-paced, DevOps environment.

Containers are changing the IT landscape, empowering developers and operations with agility and scale that match the speed of business. Security teams must adapt to this transformation with new tailored methods to prevent threats and vulnerabilities in the Container environment.

Learn how, with Qualys Container Security, you can gain total visibility and incorporate security into the DevOps cycle to harden and remove vulnerabilities before a container environment is operational.

Understand how to secure the build environments using Jenkins vulnerability analysis plug-ins, and track runtime to identify containers not conforming to the immutable behavior.

Qualys provides comprehensive security coverage across workloads and resources in your public clouds. This session covers information on the available solution, deployment methodology and new features being released.

Also, learn from three case studies from customers, including Capital One, on how you can automate securing DevOps for your public cloud workloads.

Qualys introduces CloudView, a new app that helps security teams gain visibility of complete public cloud infrastructure and continuously monitor and secure it against misconfigurations, malicious behavior, and non-standard deployments.

This talk focuses on how to use Qualys Asset Inventory to enable instant, global visibility of IT assets across all environments – with comprehensive, up-to-date and normalized inventory.

Attendees will learn how Asset Inventory provides a cohesive structure with automatic classification of technology, powered by our continuously curated product catalog. Qualys customers can now rationalize hardware and software to make strategic decisions across IT and Security.

The scalable and centrally managed Qualys Sensors provide a wide range of asset data collection capabilities, including agentless, agent based and the latest addition, passive discovery.

To address the challenges of vulnerability detections increasing year over year, Qualys is introducing new ways to visualize vulnerability data, layering Real-time Threat Information on top of detected vulnerabilities to provide consistent and automated remediation prioritization.

Qualys is bringing AssetView technology to Qualys Vulnerability Management, allowing users to instantly search across vulnerabilities and create dynamic widgets and dashboards within the VM module.

See the new VM Dashboard and instant search capabilities, a demo of Qualys Threat Protection, as well as a sneak peek at our new Reporting Module that will unify reports across the Qualys Cloud Platform.

As organizations accelerate their move to the cloud, securing their hybrid IT environments becomes dependent on building a unified approach to prevention and detection of breaches across global IT assets - whether on premises, endpoints, cloud, mobile or IoT.

This talk will outline how enterprises are using the Qualys Cloud Agent to provide continuous Asset Management and Vulnerability Management for on-premises systems, user endpoints, and cloud instances. A new Indication of Compromise (IOC) app now also monitors, records, and analyzes millions of system events to deliver scalable threat intelligence verification, hunting and suspicious activity detection, and malware family detection for security analyst and incident response teams of all sizes.

This expansion also extends the Qualys Cloud Platform capability to automate response with Patch Management. Learn how to deliver InfoSec, Endpoint, DevSec, and Cloud teams a single platform to secure an evolving global IT environment at a lower cost.

Qualys Chief Product Officer Sumedh Thakar discusses how organizations can leverage continuous visibility of IT assets to deliver Transparent-Orchestration(TM) of security at the epicentre of the digital transformation.

This talk will discuss how companies can regain visibility across their hybrid IT environments, consolidate their security and compliance stack to make it more effective and less costly, and safeguard their digital transformation.

Sumedh will also discuss the 2018 roadmap for the Qualys Cloud Platform and its integrated Cloud Apps. He will cover new forthcoming and groundbreaking apps and services and highlight customer use cases for building security in and not bolting it on.

As companies embrace technologies such as the Internet of Things, big data, cloud, and mobility, they must make security more than an afterthought.

Qualys Chairman and CEO Philippe Courtot will discuss how In this digital era, the focus needs to shift from securing network perimeters to safeguarding data spread across systems, endpoints, and the cloud.

He will also deliver an update on Qualys and how the company is helping customers worldwide move effortlessly into this new digital age while building in end-to-end security.

Take Control of Your Digital Certificates Globally: Assess and Monitor Their Security Implementation

Effective certificate management is critical for every organization, especially to prevent risk of breaches and unplanned outages. Having complete visibility into certificates, underlying SSL/TLS configurations and Certificate Authority policies, enable organizations to continuously and effectively protect their digital assets.

Join Asif Karel, Director of Product Management for Qualys CertView, to learn how your organization can discover, monitor and create an inventory of certificates.

You will understand how to:
* Create a full inventory of certificates across the enterprise
* Prevent expired or expiring certificates from causing disruptions in business critical systems
* Get full visibility of TLS configurations in your enterprise
* Get SSL Labs like grades for each certificate
* Detect specific vulnerabilities (such as POODLE, ROBOT, etc), risks (weak ciphers/protocols) or compliance issues (PCI, unapproved CAs) through customizable dashboards and searches

This webcast will also include a live demo and Q&A with the speaker.

As organizations start moving workloads to public clouds, they are encountering new cloud native security threats and compliance challenges as a result of lack of visibility and no clear understanding of shared security responsibility. Issues like leaky storage buckets, misconfigured security groups, and erroneous user policies create new attack surfaces that will lead to the vulnerable and non-compliant workloads.

Join Hari Srinivasan, Director of Product Management at Qualys, to understand your organization’s shared security responsibility in

You will learn how to:
- Get comprehensive inventory and security posture of your public cloud workloads and infrastructure
- Identify threats native to clouds and standardize cloud environments as per CIS benchmarks and best practices
- Get insights and prioritize by having cloud instance vulnerabilities and compliance posture within the single interface
- Automate security into your DevOps pipeline and block threats from entering into your production cloud deployments. public clouds and how to continuously assess and monitor cloud assets and resources.

This webcast will also include a live demo and Q&A with the speaker.