The Qualys® Newsletter

The Qualys Booth @ RSA 2010

Thu, 11 Mar 2010 17:17:03 -0800

http://www.youtube.com/watch?v=WbHLsoGZtJ8&hd=1

RSA Conference 2010 Pictures

Thu, 11 Mar 2010 14:46:34 -0800

Check out the full set at:
http://www.flickr.com/photos/27063400@N03/sets/72157623601375004/

Qualys CEO Philippe Courtot RSA 2010 Keynote

Fri, 05 Mar 2010 16:59:03 -0800

Missed Wednesday's RSA keynote? Check out Philippe Courtot's keynote in it's entirety as he discusses "Changing Security as We Know It: Our Destiny is in the Cloud"

View Interactive Webcast

Qualys Wins SC Magazine Award 2010 for Best Vulnerability Management

Thu, 04 Mar 2010 15:51:24 -0800

QualysGuard Vulnerability Management (VM) has been awarded the SC Magazine's Reader Trust Award for the Best Vulnerability Management Solution for the fourth consecutive year. The award was announced at the SC Awards Gala, held in conjunction with the annual RSA Conference in San Francisco on March 2, 2010.

Click here to read the news release.

Core Security Technologies Completes Integration with QualysGuard PCI Connect

Tue, 02 Mar 2010 10:18:49 -0800

Today at RSA Conference 2010, Core Security Technologies announced the integration of CORE IMPACT Pro, the industry's leading automated penetration testing software solution with QualysGuard PCI Connect. With this integration, Qualys customers can now address PCI DSS Requirement 11.3 - which directs merchants to perform in-depth penetration testing both annually and after making upgrades or modifications to IT systems retaining sensitive cardholder data.

PCI Connect customers can now run IMPACT Pro's PCI Vulnerability Validation Report to complete their Self Assessment Questionnaire (SAQ) directly within the QualysGuard PCI Connect interface. IMPACT Pro also allows organizations to carry out a wide range of security assessments dictated by other PCI DSS guidelines, as well as validate the efficacy of many mandated security controls.

Click here to read the full press release.

Imperva and Qualys Partner To Help Enterprises Protect Against Malicious Attacks on Web Applications

Mon, 01 Mar 2010 11:17:59 -0800

Qualys and Imperva today announced the integration of Qualys' QualysGuard® Web Application Scanning with Imperva's SecureSphere Web Application Firewall (WAF). This combination gives enterprises an ability to deploy a comprehensive security strategy that delivers powerful protection for business-critical Web applications. Savvis will provide the Qualys-Imperva integrated solution as part of its hosting and Savvis Symphony cloud infrastructure solutions for enterprises. More info.

Click here for full news release.

Trend Micro Partners with Qualys to Strengthen its Security and Compliance Offerings

Mon, 01 Mar 2010 10:47:40 -0800

Trend Micro today expanded its security and compliance coverage through the announcement of a strategic relationship with Qualys, a recognized leader in on demand IT security risk and compliance management solutions. Under the agreement, Trend Micro will repackage and sell the QualysGuard IT Security and Compliance Suite with its Trend Micro™ Enterprise Security compliance offerings to provide a more comprehensive solution for customers worldwide.

Click here to see the full news release.

Qualys Announces New Services to Help Businesses Protect Their Web Sites from Malware and Vulnerabilities

Mon, 01 Mar 2010 10:14:45 -0800

Today at RSA Conference USA 2010, Qualys announced two new services to help businesses stop malware and vulnerabilities on their web sites.

Qualys launched QualysGuard® Malware Detection, a free service that proactively scans web sites of any size, anywhere in the world, for malware infections and threats. QualysGuard Malware Detection provides businesses with automated alerts and in-depth reporting for effective remediation of identified malware. Click here to read the news release, and visit http://www.qualys.com/forms/trials/stopmalware/ to participate in the beta.

Qualys also announced GO SECURE - a new service that allows businesses of all sizes to test their web sites for the presence of malware, network and web application vulnerabilities, as well as SSL certificate validation. Once a web site passes the four comprehensive security tests, the Qualys GO SECURE service generates a Qualys SECURE seal for the merchant to display on their web site demonstrating to online customers that their company is maintaining a rigorous and proactive security program. Click here to read the news release, and visit http://www.qualys.com/products/qg_suite/GO_SECURE/
for more information or to sign up for the service.

Exclusive Product Preview Monday Night at RSA
RSA attendees - join us in the Qualys Booth, booth #1432, for a an exclusive preview Monday night at 7pm.

Qualys Receives Highest Rating in Gartner MarketScope on Vulnerability Assessment

Wed, 24 Feb 2010 11:22:38 -0800

Qualys has earned the highest rating - "strong positive" - in Gartner's MarketScope for Vulnerability Assessment (VA).

Click here to read the full report.

Qualys Security in the Cloud Twitter Giveaway - How to Win an iPod Shuffle or iPod Nano

Tue, 23 Feb 2010 10:36:46 -0800

As we get ready for RSA Conference 2010, we'd like to see your best security tips on twitter. Include #rsac and #qualys in your tweet, and make sure you are following Qualys on Twitter so we can find your tweets. Check Qualys on Twitter daily to find out if you've won. We'll be giving away an iPod shuffle each day, and next week at RSA, we will announce the winners of two iPod nanos. Stop by our booth at RSA to collect your prize, or let us know where we can mail it. We'll also post your tips to this blog after the conference.

Results of the Contest
Congratulations to the three winners of the Qualys Security Tips Twitter contest: @TriumphCISO, @davidmostardi, and @danielkennedy74! We hope you each are enjoying your iPod Shuffle.

There's lots of good tips compressed into 140 characters each. See the best security tips from the contest.

Qualys Introduces First Certified Cloud-Based Solution for Federal Desktop Core Configuration (FDCC) Compliance

Tue, 23 Feb 2010 08:52:09 -0800

Today Qualys announced the first certified cloud-based computing solution for FDCC compliance. The new QualysGuard FDCC module, validated by the National Institute of Standards and Technology (NIST) as conforming to the Security Content Automation Protocol (SCAP) and its component standards, provides a centralized, integrated solution leveraging the QualysGuard Software-as-a-Service (SaaS) architecture helping federal agencies validate the configuration of their desktops according to FDCC regulations.

Click here to view the news release.

Philippe Courtot and Wolfgang Kandek Named 2010 CRN Security Superstars

Mon, 22 Feb 2010 12:07:56 -0800

Qualys Chairman and CEO Philippe Courtot and Qualys CTO Wolfgang Kandek have been named 2010 CRN Security Superstars. The comprehensive list created by Everything Channel editorial includes the leading thinkers, researchers and executives in the information security industry.

Click here to view the news release.

Qualys Named a Finalist for Four SC Magazine Europe Awards

Tue, 16 Feb 2010 10:39:10 -0800

Qualys has been named a finalist in SC Magazine Europe Awards in the following categories: Best Enterprise Security Solution, Best SME Security Solution, Information Security Vendor of the Year and CEO of the Year.

"It is an honour to be acknowledged by SC Magazine readers and the judging panel in four categories this year. It's by working closely with our customers and with the industry that we can make our network secure," said Philippe Courtot, Qualys chairman and CEO.

Click here to read the news release.

Guest Post on PCI Compliance for BT: SecureThinking

Wed, 10 Feb 2010 15:52:59 -0800

BT's SecureThinking: SecureCompliance blog features a new article from Qualys VP of Product Marketing Terry Ramos titled "PCI Compliance is Still a Myriad of Tough Choices on the 'Journey' Towards Compliance." The article discusses how organizations that process, store or transmit credit card data must employ a continuous process to achieve and maintain PCI compliance.

Click here to read the story. Terry Ramos is also the co-author of "PCI Compliance for Dummies."

Guest Blog: Who Will Secure the Clouds of Tomorrow?

Tue, 09 Feb 2010 09:00:00 -0800

By Alessandro Perilli, CISSP, Founder and Chief Editor, virtualization.info

Virtualization and Security Expert Alessandro Perilli discusses the future of cloud computing and its security implications.

The data centers of tomorrow will be computing clouds - massive aggregations of resources that are served inside geographically dispersed computers. As customers put their data into these clouds, they don't have to buy the software to manipulate and process their data anymore. They just pay for the time the cloud is used to perform a certain task with their data.
But who will secure these clouds? This piece will discuss the future of computing and its impact on security.

Click here to read the full article.