April 23, 2024

Tugu Forever

Computer Will Live On Forever

Qualys previews TotalCloud FlexScan for multicloud security management

2 min read
cloud computing / cloud network

Vulnerability administration vendor Qualys this 7 days declared the trial availability of its TotalCloud with FlexScan providing, an agentless, cloud-native vulnerability detection and response system designed for use in multicloud and hybrid environments.

The software is intended to deliver a holistic overview of an organization’s cloud-centered workloads and discover recognised vulnerabilities. The process also scans workloads to verify irrespective of whether they’ve opened community ports, and screens a host of other components to supply a in-depth image of a business’ in general vulnerability standing, monitoring publicly exposed VMs (virtual equipment), databases, person accounts and exploitable vulnerabilities in community-going through property.

The corporation said that many of TotalCloud’s capabilities are intended to be no-code, letting buyers to use a GUI (graphical consumer interface) to perform complicated operational jobs this kind of as quarantining assets and location notify parameters, which would ordinarily call for coding and be much extra time-consuming.

TotalCloud, Qualys additional, is also built as a devsecops software for developers, allowing for them to establish and proper safety flaws at each stage of the improvement method.

TotalCloud options agentless style and design

A person of TotalCloud’s most important offering factors is its agentless style, indicating that no software program has to operate on the monitored property, with the notion remaining that the application will not impact the workloads it is monitoring, according to IDC group vice president for protection and rely on Frank Dickson.

“Agentless protection is a excellent innovation to handle imperfective approaches to software protection inside organizations,” he mentioned. “Essentially, agentless protection mitigates cross firm conflict resulting from developer objections as cloud operations is primarily analyzing the atmosphere behind a digital sealed pane of glass.”

What that also means, on the other hand, is that the agentless approach to stability is fundamentally dependent on person snapshots of the units it is protecting, not on continuous, second-to-instant checking. In accordance to Dickson, this means that the program are not able to secure workloads that spin up momentarily and then shut back again down once again among individuals snapshots.

“Additionally, agentless options are unable to extract activity telemetry like course of action information and facts, L3/L4 connections activity, memory assessment or other serious time facts,” he pointed out. “Finally, you are really confined in using action without an agent so response and remediation steps are limited. A stability experienced will be restricted in the ability to isolate a workload or redeploy a golden graphic without having an agent.”

Qualys mentioned TotalCloud will be made generally readily available by the stop of 2022.

Copyright © 2022 IDG Communications, Inc.