Qualys

Sources: Qualys (homepage) · Enterprise Patch & Remediation Benchmark 2026

Qualys is a cloud-based vulnerability-management, compliance, and patch-management vendor. Its platform covers vulnerability scanning, the TruRisk prioritization model, and patch and remediation automation (TruRisk Eliminate). The vendor frames the platform as a shift from counting vulnerabilities to measuring risk reduction.

On this wiki Qualys appears as a source of remediation telemetry rather than as a security-AI capability. Its Enterprise Patch & Remediation Benchmark 2026 reports on roughly 150 million patches deployed across enterprise environments over twelve months, about 40 million of them deployed autonomously with no human in the loop.¹ That benchmark is the wiki’s source for the mean time-to-remediation figure used in AI-Era Supply Chain Hardening.

Notes

Footnotes

1. Qualys — Enterprise Patch & Remediation Benchmark 2026, April 2026. Sumedh Thakar (President & CEO): of roughly 150 million patches deployed by Qualys in the last twelve months, about 40 million were deployed autonomously with no human in the loop. ↩