Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

The Qualys TruRisk Platform, previously known as the Qualys Cloud Platform, features an innovative architecture that drives a wide range of cloud applications focused on IT, security, and compliance. With its continuous and always-active assessment capabilities, the Qualys TruRisk Platform allows for real-time, 2-second visibility into your global IT environment, regardless of the location of your assets. Coupled with automated threat prioritization, patch management, and additional response functionalities, it serves as a comprehensive security solution. Whether deployed on-premises, on endpoints, within mobile environments, in containers, or in the cloud, the platform's sensors provide constancy in visibility across all IT assets at every moment. These sensors are designed to be remotely deployed, centrally managed, and self-updating, available as either physical or virtual appliances, or as lightweight agents. By offering an integrated end-to-end solution, the Qualys TruRisk Platform helps organizations sidestep the expenses and complications related to juggling multiple security vendors, ultimately streamlining their security management strategy. This holistic approach ensures that businesses can maintain a robust security posture while focusing on their core operations.

Description

Identity and Data Protection for AWS and Azure, Google Cloud, and Kubernetes. Sonrai's cloud security platform offers a complete risk model that includes activity and movement across cloud accounts and cloud providers. Discover all data and identity relationships between administrators, roles and compute instances. Our critical resource monitor monitors your critical data stored in object stores (e.g. AWS S3, Azure Blob), and database services (e.g. CosmosDB, Dynamo DB, RDS). Privacy and compliance controls are maintained across multiple cloud providers and third-party data stores. All resolutions are coordinated with the relevant DevSecOps groups.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Amazon Web Services (AWS) Yes 
Google Cloud Platform Yes 
Microsoft Azure Yes 
Armis Centrix Yes 
Bugcrowd Yes 
Cyware Yes 
Google Digital Risk Protection Yes 
Imperva DDoS Protection Yes 
Jira Service Management No 
Nutanix Security Central Yes 
Opsera Yes 
Panaseer Yes 
PassiveTotal Yes 
Qualys Global AssetView Yes 
Redis No 
Seemplicity Yes 
Silk Security Yes 
Tenable One No 
The Thrive Platform Yes 
anecdotes Yes 

Integrations

Amazon Web Services (AWS) Yes 
Google Cloud Platform Yes 
Microsoft Azure Yes 
Armis Centrix No 
Bugcrowd No 
Cyware No 
Google Digital Risk Protection No 
Imperva DDoS Protection No 
Jira Service Management Yes 
Nutanix Security Central No 
Opsera No 
Panaseer No 
PassiveTotal No 
Qualys Global AssetView No 
Redis Yes 
Seemplicity No 
Silk Security No 
Tenable One Yes 
The Thrive Platform No 
anecdotes No 

Pricing Details

$500.00/month
Free Trial No 
Free Version No 

Pricing Details

Contact us for pricing information.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Qualys

Founded

1999

Country

United States

Website

www.qualys.com

Vendor Details

Company Name

Sonraí Security

Founded

2017

Country

United States

Website

sonraisecurity.com

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection Yes 
Vulnerability Remediation No 

Cloud Security

Antivirus No 
Application Security No 
Behavioral Analytics No 
Encryption No 
Endpoint Management No 
Incident Management No 
Intrusion Detection System No 
Threat Intelligence No 
Two-Factor Authentication No 
Vulnerability Management No 

Cloud Workload Protection

Anomaly Detection No 
Asset Discovery No 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) No 
Data Security No 
Governance No 
Logging & Reporting No 
Machine Learning No 
Security Audit No 
Workload Diversity No 

Compliance

Archiving & Retention No 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking No 
Controls Testing Yes 
Environmental Compliance No 
FDA Compliance No 
HIPAA Compliance Yes 
ISO Compliance No 
Incident Management No 
OSHA Compliance No 
Risk Management No 
Sarbanes-Oxley Compliance Yes 
Surveys & Feedback No 
Version Control No 
Workflow / Process Automation No 

Computer Security

Anti Spam No 
Antivirus No 
Audit Trail No 
Compliance Management No 
Database Security Audit No 
File Access Control No 
Financial Data Protection No 
Maintenance Scheduling No 
Real Time Monitoring No 
Security Event Log No 
Virus Definition Update No 
Vulnerability Protection No 

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management No 
Tokenization No 
Vulnerability Scanning No 
Whitelisting / Blacklisting No 

IT Security

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking No 
IP Protection No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning No 
Web Threat Management No 
Web Traffic Reporting No 

Network Security

Access Control No 
Analytics / Reporting No 
Compliance Reporting No 
Firewalls No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Threat Response No 
VPN No 
Vulnerability Scanning No 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Product Features

Cloud Security

Antivirus No 
Application Security Yes 
Behavioral Analytics Yes 
Encryption No 
Endpoint Management No 
Incident Management Yes 
Intrusion Detection System Yes 
Threat Intelligence No 
Two-Factor Authentication Yes 
Vulnerability Management Yes 

Cloud Workload Protection

Anomaly Detection No 
Asset Discovery No 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) No 
Data Security No 
Governance No 
Logging & Reporting No 
Machine Learning No 
Security Audit No 
Workload Diversity No 

Container Security

Access Roles / Permissions No 
Application Performance Tracking No 
Centralized Policy Management No 
Container Stack Scanning No 
Image Vulnerability Detection No 
Reporting No 
Testing No 
View Container Metadata No 

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics Yes 
Endpoint Management No 
IOC Verification No 
Incident Management Yes 
Tokenization No 
Vulnerability Scanning Yes 
Whitelisting / Blacklisting No 

Data Loss Prevention

Compliance Reporting No 
Incident Management No 
Policy Management No 
Sensitive Data Identification No 
Web Threat Management No 
Whitelisting / Blacklisting No 

Data Security

Alerts / Notifications No 
Antivirus/Malware Detection No 
At-Risk Analysis No 
Audits No 
Data Center Security No 
Data Classification No 
Data Discovery No 
Data Loss Prevention No 
Data Masking No 
Data-Centric Security No 
Database Security No 
Encryption No 
Identity / Access Management No 
Logging / Reporting No 
Mobile Data Security No 
Monitor Abnormalities No 
Policy Management No 
Secure Data Transport No 
Sensitive Data Compliance No 

DevOps

Approval Workflow Yes 
Dashboard Yes 
KPIs No 
Policy Management Yes 
Portfolio Management No 
Prioritization Yes 
Release Management No 
Timeline Management Yes 
Troubleshooting Reports Yes 

IT Security

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking Yes 
IP Protection Yes 
Internet Usage Monitoring No 
Intrusion Detection System No 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning No 
Web Threat Management No 
Web Traffic Reporting No 

Log Management

Archiving Yes 
Audit Trails Yes 
Compliance Reporting Yes 
Consolidation Yes 
Data Visualization Yes 
Event Logs Yes 
Network Logs Yes 
Remediation Yes 
Syslogs Yes 
Thresholds Yes 
Web Logs Yes 

Policy Management

Approval Process Control No 
Attestation No 
Audit Trails No 
Policy Creation No 
Policy Library No 
Policy Metadata Management No 
Policy Training No 
Reporting / Analytics No 
Version Control No 
Workflow Management No 

Privileged Access Management

Application Access Control Yes 
Behavioral Analytics Yes 
Credential Management Yes 
Endpoint Management No 
For MSPs No 
Granular Access Controls Yes 
Least Privilege Yes 
Multifactor Authentication Yes 
Password Management No 
Policy Management Yes 
Remote Access Management Yes 
Threat Intelligence Yes 
User Activity Monitoring Yes 

SIEM

Application Security No 
Behavioral Analytics No 
Compliance Reporting No 
Endpoint Management No 
File Integrity Monitoring No 
Forensic Analysis No 
Log Management No 
Network Monitoring No 
Real Time Monitoring No 
Threat Intelligence No 
User Activity Monitoring No 

Alternatives

Alternatives

Flexera One Reviews

Flexera One

Flexera
Qualys VMDR Reviews

Qualys VMDR

Qualys