Latest / Full Tech Ahead / Automate Security Remediation with Confidence

Transcript

Automate Security Remediation with Confidence · Full Tech Ahead

• 0:19
  SPEAKER_00: Hello and welcome to Full Tech Ahead.
• 0:22
  SPEAKER_00: I'm your host, Amanda Razzani, and I'm so excited to be here at Qualis's big annual event, Rock On 2026, with Kanal Modite Morasia.
• 0:33
  SPEAKER_00: And he is the senior vice president, product management, go to market and growth at Qualis.
• 0:39
  SPEAKER_00: So how are you doing today?
• 0:41
  SPEAKER_01: Hey Amanda, I'm doing good.
• 0:44
  SPEAKER_01: And then thank you for hosting me, reporting live from uh Qualysis uh Rocon, the Risk Operation Conference here in Austin.
• 0:52
  SPEAKER_01: Nice weather.
• 0:53
  SPEAKER_01: Uh, I see the Bay Area vibe here.
• 0:55
  SPEAKER_01: That's where I live in a San Francisco Bay Area.
• 0:58
  SPEAKER_01: So pretty same uh vibe here, and with uh uh hundreds of customers already checked in uh for the training today.
• 1:06
  SPEAKER_01: A lot of energy, a lot of positivism, and a lot of hallway chats around AI and attacks and whatnot.
• 1:14
  SPEAKER_01: So we'll we'll walk you through that.
• 1:15
  SPEAKER_01: But yeah, no, super excited.
• 1:17
  SPEAKER_00: Fantastic.
• 1:18
  SPEAKER_00: Well, can you first, just for our audience who may not know, can you share what Qualis provides?
• 1:24
  SPEAKER_01: Yeah, no, great.
• 1:25
  SPEAKER_01: So QuALIS is a leading cybersecurity company uh founded in 1999.
• 1:31
  SPEAKER_01: So he's been in a business for the last uh uh 25 plus years with a single mission.
• 1:37
  SPEAKER_01: The mission has always been that Qualys wants to help uh customers globally in managing, communicating, and eliminating their cyber risk, which is basically created by the cyber attackers, right?
• 1:52
  SPEAKER_01: So the simple goal, simple mission to help organization in do business safe and secure way by securing or by managing the cyber risk.
• 2:03
  SPEAKER_01: That's the vision.
• 2:04
  SPEAKER_01: That's the mission of the company.
• 2:06
  SPEAKER_00: Wonderful.
• 2:07
  SPEAKER_00: Well, can you start first by sharing what is the overarching message at this year's event?
• 2:14
  SPEAKER_01: Yes, great question.
• 2:15
  SPEAKER_01: Look, the overarching message is all about the agentic AI, as you can imagine, Amanda, with agentique AI, the it is giving an advantage to the attackers also, and attackers are leveraging agent uh AI uh to basically launch the attack at the machine speed.
• 2:32
  SPEAKER_01: So the overarching message, you know, one-liner, if you were to ask me, Kunal, tell me one liner, what's the message?
• 2:38
  SPEAKER_01: We our message is that use AI to fight with AI.
• 2:42
  SPEAKER_01: That's the only way to do this.
• 2:44
  SPEAKER_01: There is no other way.
• 2:46
  SPEAKER_00: Absolutely.
• 2:47
  SPEAKER_00: Well, so AI is really changing the game.
• 2:50
  SPEAKER_00: Can you share from your experience how is AI helping attackers exploit vulnerabilities a lot quicker?
• 3:00
  SPEAKER_01: Yes, no, great question, Amanda.
• 3:02
  SPEAKER_01: And before we talk about that, but if you look at some of the uh data points that are available in the market, right?
• 3:08
  SPEAKER_01: You see the Verizons, the DBIR report, and all of that, right?
• 3:12
  SPEAKER_01: I mean, the vulnerability exploitation is the number one thing that attackers are leveraging to land into the organizations to start doing bridges, right?
• 3:22
  SPEAKER_01: So that that remains number one.
• 3:24
  SPEAKER_01: Second, now coming back to your point, with the AI models like a mythos and other frontier AI model, what attackers are able to do is to build the exploit chaining.
• 3:40
  SPEAKER_01: Build the exploit chaining at the machine speed because the model will help them build those exploits very, very rapidly.
• 3:49
  SPEAKER_01: So if we go back historically, when the new disclosure, new vulnerability disclosures comes in, then a month later, two months later, attackers would start thinking about how to write the exploit and etc.
• 4:02
  SPEAKER_01: Right now that window of disclosure to the writing the exploit and chain of exploit to get into the organization.
• 4:13
  SPEAKER_01: Why?
• 4:14
  SPEAKER_01: Because attackers are now leveraging the frontier AI model for bad purposes.
• 4:19
  SPEAKER_01: While, like a good citizen like you and me, are using the model to build the business, to drive the productivity.
• 4:26
  SPEAKER_01: For them, it is a different type of business.
• 4:28
  SPEAKER_01: So that's what the AI is giving them an unfair advantage and which is helping them reduce that window of disclosure to the exploitation.
• 4:40
  SPEAKER_00: What's slowing security teams down when it comes to fixing these attacks?
• 4:45
  SPEAKER_01: Very, very great question, right?
• 4:46
  SPEAKER_01: And if you really look at some of the data points, uh and today actually is a patch Tuesday, so we are waiting for that.
• 4:53
  SPEAKER_01: But if you see the last one, September uh 13th or 12th, I think there was a patch Tuesday when Microsoft releases the disclosure, right, about their uh environment.
• 5:02
  SPEAKER_01: Uh and then they release the patches.
• 5:05
  SPEAKER_01: So the number of uh disclosure only with one vendor that's a Microsoft had gone to 972 patches, which is 10x compared to the last year September, right?
• 5:19
  SPEAKER_01: So the disclosures are increasing in an order of magnitude.
• 5:25
  SPEAKER_01: And if you think about this, think of this as a top of the funnel where all of these disclosures are coming, and then the bottom of the funnel, you see here the number of vulnerabilities that are getting exploited.
• 5:36
  SPEAKER_01: See, all of the disclosures are not necessarily risky, the ones that that are getting exploited by the attackers, which is think of that as your bottom of the funnel.
• 5:46
  SPEAKER_01: Okay.
• 5:47
  SPEAKER_01: Now, since the top of the funnel, which is the new disclosure amenda, that are increasing in an order of magnitude, like a 10x, 20x.
• 5:54
  SPEAKER_01: So that is increasing from here to here, right?
• 5:57
  SPEAKER_01: And the bottom of the funnel is also proportionally increasing.
• 6:01
  SPEAKER_01: And to my point that I said that the AI model is giving them an unfair advantage, so they are producing those exploits faster.
• 6:11
  SPEAKER_01: So you see the bottom of the funnel is also increasing.
• 6:14
  SPEAKER_01: So now the question is how can a security team quickly fix those bottom of the funnel, prioritize finding before attacker actually launched the exploit, correct, and get in their environment.
• 6:28
  SPEAKER_01: And the only way to do it, the only way, Amanda, practically possible, humanly possible, is to have an automation, leverage the agency KI and start eliminating the risk that is applicable in your environment, which is validated that hey, this risk is applicable in your environment rather than worrying the top of the funnel, focus on a bottom of the funnel and figure it out which ones are applicable, validated in your environment.
• 6:59
  SPEAKER_01: And then start automating them by leveraging the AI.
• 7:04
  SPEAKER_00: Okay.
• 7:05
  SPEAKER_00: Well, and you're unveiling a new solution, the True Risk Eliminate 2.0 at this event.
• 7:12
  SPEAKER_00: So what's the difference?
• 7:14
  SPEAKER_01: Oh, yeah, no, great question, right?
• 7:16
  SPEAKER_01: And this is where uh one of the key themes uh for this year's Rocon conference is the uh we we call it as a three musketeer agents, right?
• 7:26
  SPEAKER_01: And uh so the agent KI powered agents, agent insta.
• 7:31
  SPEAKER_01: So what it does as soon as the disclosures are coming, the new findings are coming, agent insta, which is instant detection, it helps you detect all of those in your environment.
• 7:42
  SPEAKER_01: Number one.
• 7:42
  SPEAKER_01: So that's the first agent.
• 7:44
  SPEAKER_01: The second agent is the agent validation, agent val is how we call it, agent well.
• 7:51
  SPEAKER_01: Okay, what it does, it takes those exploitable vulnerabilities and then tests it in your environment that can attacker exploit in your environment.
• 8:00
  SPEAKER_01: If yes, then it is risky, otherwise, it's a theoretical risk.
• 8:04
  SPEAKER_01: So that's a second musketeer agent.
• 8:07
  SPEAKER_01: The third one, which is the big launch today, is the agent Sarah.
• 8:13
  SPEAKER_01: That is for the zero-day remediation.
• 8:16
  SPEAKER_01: So the one disclosure or vulnerabilities that are validated can be exploited in your environment.
• 8:23
  SPEAKER_01: Agent Sarah fix those and helps you with the planning on what to fix, what not to fix, what kind of controls that you have in your environment, how to remediate them faster without deploying the patches and etc.
• 8:38
  SPEAKER_01: So that's the exciting announcement, Amanda, which is the True Risk Eliminate 2.0 product.
• 8:45
  SPEAKER_01: That's the latest and greatest announcements with the agent Sarah, which is part of our three Musketeer overarching theme that we are uh reinforcing at Aqualis, and then Agent Sarah is the new capability as a part of our True Risk Eliminate 2.0 launch, which is going to help organization in planning, preparing, and remediating the disclosure at the machine speed that is the AI fighting with the AI.
• 9:16
  SPEAKER_00: Absolutely.
• 9:17
  SPEAKER_00: So, can you also share how does the true confidence help teams move faster while making sure that the fixes are safe?
• 9:25
  SPEAKER_01: Great question, and glad that you brought it up, right?
• 9:27
  SPEAKER_01: So, as a part of our true risk caluminate 2.0, we are unveiling true confidence, which is our AI-powered remediation intelligence and the orchestration engine.
• 9:41
  SPEAKER_01: Now, Amanda, if you think about it, whenever there are disclosures, vulnerabilities, and all of that is coming in, in order to fix them, organization really had always had an option of automating those patch deployments or automating those mitigation and all.
• 9:59
  SPEAKER_01: But still, as you see the data, the or or the way organizations are operating today is by creating the ticket and waiting for a 60-90 days SLS and etc.
• 10:10
  SPEAKER_01: So, though the automation to automate and fix those vulnerabilities was never the blocker, the real blocker amenda was the confidence.
• 10:21
  SPEAKER_01: The confidence in, hey, will this remediation work?
• 10:24
  SPEAKER_01: What if I deploy this patch?
• 10:26
  SPEAKER_01: Then how would my system or my business will behave?
• 10:29
  SPEAKER_01: For example, if you are a banking customer and if you are deploying the patch, your biggest concern is what if after the patch is deployed, if it brings down my banking application?
• 10:41
  SPEAKER_01: Now that's the billions of dollars of loss for your organization.
• 10:44
  SPEAKER_01: So true confidence with our AI-powered remediation intelligence and orchestration engine gives that confidence and a trust to the security team in remediating the findings before even you start about it, and then during the remediation and after remediation is done, it is monitoring your business for a resiliency that if business is not going down.
• 11:14
  SPEAKER_01: Right.
• 11:15
  SPEAKER_01: And I can I can talk a bit more, but true confidence before the patch deployment or a remediation, during the patch deployment and mitigation, and after the patch deployment and mitigation is what we call it as a true confidence everywhere.
• 11:31
  SPEAKER_00: Fantastic.
• 11:32
  SPEAKER_00: Thank you for sharing that example.
• 11:34
  SPEAKER_00: Well, from a vendor neutral standpoint, what is one step that security leaders could take today to close the gap between finding risks and fixing them?
• 11:45
  SPEAKER_01: Of course.
• 11:46
  SPEAKER_01: That is a great question.
• 11:47
  SPEAKER_01: And as I said, the overarching theme or message for the security leader that guys use the AI to fight with AI.
• 11:54
  SPEAKER_01: There is no other way.
• 11:55
  SPEAKER_01: Human cannot outpace the machine speed.
• 11:57
  SPEAKER_01: This is proven, it's nothing new, and you got to leverage the AI.
• 12:01
  SPEAKER_01: And you have to be comfortable to live in an uncomfortable environment where the disclosures are going to balloon and the number of exploits going to also increase.
• 12:12
  SPEAKER_01: And you need to leverage the zero-day remediation strategy by deploying the agents, and especially like agent Sarah that quality says launched a year back, and now we refresh with a lot of exciting things.
• 12:25
  SPEAKER_01: Where now we help we are helping the security team in planning what to fix, what not to fix, and when what to fix is available, then is the patch is available.
• 12:38
  SPEAKER_01: Can they do the third-party mitigation by using their existing Zscalar, CrowdStrike, and all of the control that they have already put into place?
• 12:47
  SPEAKER_01: Right.
• 12:48
  SPEAKER_01: And then during the patching, they need a strategy that what if the patch goes down?
• 12:53
  SPEAKER_01: Right?
• 12:54
  SPEAKER_01: And after the patch is deployed, how is my business going to remain resilient or not?
• 12:58
  SPEAKER_01: Right.
• 12:59
  SPEAKER_01: So, security team, our advice to them is not to get overly concerned about the automation.
• 13:06
  SPEAKER_01: Automation is here to help, leverage the AI.
• 13:10
  SPEAKER_01: And when you are thinking about remediating the risk, think holistically that what to fix, what not to fix is also important.
• 13:18
  SPEAKER_01: And when you think about it, you have to look at your existing compensatory control that you have already applied.
• 13:24
  SPEAKER_01: That means risk is already covered.
• 13:26
  SPEAKER_01: If you patching is the right strategy, then you apply the patches with the confidence that it's guaranteed to work.
• 13:32
  SPEAKER_01: And if anything goes wrong, you have ability to roll back.
• 13:35
  SPEAKER_01: And if patching is not the right strategy, then think about the mitigation.
• 13:38
  SPEAKER_01: That how can you minimize risk, right?
• 13:41
  SPEAKER_01: So this is how we qualists uh recommend the security leader in approach this uh uh from holistic strategy perspective, planning perspective, and that's where we introduce the autonomous REM-ups remediation operation center, which is the new platform concepts that qualicies or new market category that we are creating called autonomous RAM-ups, which is a general open architecture with the six different stages.
• 14:11
  SPEAKER_01: First, fix the validated one, then give a credit for the existing control that you have deployed, then figure it out what is the right strategy for you, whether it is a patching or a patchless remediation.
• 14:23
  SPEAKER_01: Then you figure it out what's your resiliency strategy and what if the patch goes down, right?
• 14:28
  SPEAKER_01: So, this is a general framework that we are announcing today called autonomous REMOPS remediation operation.
• 14:35
  SPEAKER_01: And as a part of that, the true risk eliminate 2.0 with the true confidence is the implementation of that autonomous REMOPS platform.
• 14:43
  SPEAKER_01: And that's what we are advising to our customer.
• 14:46
  SPEAKER_01: And I just walked out of the product advisory board meeting that is happening right now, and I can tell you, Amanda, we have a 22 member coming from large banks, retail, financial industries, healthcare, they are all sitting in the room and I'm I was listening to their introduction.
• 15:04
  SPEAKER_01: Everybody is worried about one word remediation.
• 15:07
  SPEAKER_01: How do I quickly remediate?
• 15:10
  SPEAKER_00: Fantastic.
• 15:11
  SPEAKER_00: That was gonna be my next question is what were people saying about these announcements?
• 15:16
  SPEAKER_00: What were they most excited about?
• 15:18
  SPEAKER_00: What were their biggest concerns here at the conference?
• 15:21
  SPEAKER_00: So you brought up remediation.
• 15:23
  SPEAKER_00: Can you share a little bit more about that?
• 15:25
  SPEAKER_00: You know, kind of window into the biggest concerns or the issues of your customers and why they came to this event today?
• 15:33
  SPEAKER_01: Totally.
• 15:34
  SPEAKER_01: Look, I mean, one of the key draws here for them to come here is to learn from a Qualices CEO leadership, and then we have industry thought leaders that are coming in tomorrow when the actual conference starts, right?
• 15:46
  SPEAKER_01: And so they are coming.
• 15:47
  SPEAKER_01: So they want to hear about latest trends, what's happening in industry, how Qualys is innovating.
• 15:52
  SPEAKER_01: That's one.
• 15:53
  SPEAKER_01: Second thing, and I can tell you this, I'm already hearing.
• 15:57
  SPEAKER_01: Security practitioners are telling us that their CISO, their CIO, chief information officer, are now asking them, hey, can you patch this?
• 16:08
  SPEAKER_01: Can you remediate in the next 48 hours?
• 16:11
  SPEAKER_01: Earlier, the CIO and CISOs will tell the security team that can you create a ticket?
• 16:16
  SPEAKER_01: And then my guy will look at when they have a bandwidth.
• 16:19
  SPEAKER_01: That bandwidth comes after 60-90 days.
• 16:21
  SPEAKER_01: Now they are telling us, hey, Qualis, do you have a solution for us to patch it or remediate or mitigate the risk in 48 hours?
• 16:30
  SPEAKER_01: In hours.
• 16:31
  SPEAKER_01: You remember, Amanda, earlier it was months.
• 16:35
  SPEAKER_01: Now they are asking us that can you help me remediate in hours?
• 16:40
  SPEAKER_01: And the biggest draw so far with all of the signage that we have is the three musketeer agents that I told you.
• 16:46
  SPEAKER_01: And they are very, very curious about agent Insta, which is for instant detection, agent Val to validate what exists or exploitable in your environment, and Agent Sarah, which is a remediation.
• 17:00
  SPEAKER_01: So they are very, very curious.
• 17:02
  SPEAKER_01: They have been asking a lot of questions, and hey, not months, not years for the remediation.
• 17:08
  SPEAKER_01: How can I remediate in a 48 hours?
• 17:12
  SPEAKER_00: Wow.
• 17:13
  SPEAKER_00: Well, if there was one piece of advice you could give business leaders on how to prepare for this rapidly advancing technology, as in regard to the future, what would you tell them?
• 17:26
  SPEAKER_01: Yes, like I said, right?
• 17:28
  SPEAKER_01: You have to be comfortable to live in an uncomfortable environment and learn to leverage AI, embrace the AI, to fight with the AI-powered attackers who are going to continuously increase the attacks, speed, and accuracy.
• 17:49
  SPEAKER_01: And the only way to fight is to leverage the AI.
• 17:54
  SPEAKER_01: And so start looking at how the agents, AI agents are going to help in your organization.
• 18:00
  SPEAKER_01: And look, like any other technology, whenever the new tech technology comes, it always has some downside.
• 18:06
  SPEAKER_01: But our recommendation to them, Amanda, is that if the benefit outweighs the risk, then you have to take that risk.
• 18:14
  SPEAKER_01: And there is never ever going to be zero risk in your in your life, in your enterprise IT cyber hygiene, you will always have some risk.
• 18:24
  SPEAKER_01: So if the benefit outweighs the risk, take the risk and go for it.
• 18:28
  SPEAKER_01: And that's where leveraging the AI is going to be extremely important.
• 18:32
  SPEAKER_01: We firmly believe the next decade will be dominated by the agents with the human in the loop.
• 18:39
  SPEAKER_01: And they are those organizations who are embracing them early are the ones who will drive their business agility with the safety and the trust that is needed to build for their customers.
• 18:52
  SPEAKER_00: Absolutely.
• 18:53
  SPEAKER_00: Well, thank you so much for taking time out of this busy conference to speak with me today.
• 18:58
  SPEAKER_00: And I can't wait to hear more sessions and speak with more people.
• 19:02
  SPEAKER_01: Thank you, Amanda, for having me.
• 19:04
  SPEAKER_01: And I look forward to seeing you uh later today in the evening.
• 19:07
  SPEAKER_01: We have a reception.
• 19:09
  SPEAKER_01: And guys, if as you are watching the show, please go to the COLIS and figuring and look at our three musketeer agents on how they are going to help you uh fight against the AI using the AI.
• 19:20
  SPEAKER_01: So thank you so much, uh Amanda, for hosting me.
• 19:23
  SPEAKER_00: Thank you.
• 19:23
  SPEAKER_00: And thank you to our audience.
• 19:24
  SPEAKER_00: If you have any questions or comments, leave them below, and I'll try to respond back as soon as possible.
• 19:29
  SPEAKER_00: And until the next podcast, have a wonderful week.