Everything Visible. Everything Secure.

Everything visible.Everything secure.Unparalleled visibility, end-to-end securityand compliance for all your global IT assetsThe power of theQualys Cloud PlatformComplete, real-time inventory of all ITassets – wherever they resideContinuous assessment of your globalsecurity & compliance postureIdentify zero-day vulnerabilities andcompromised assetsAutomatically patch and quarantineassetsConsolidate your security & compliancestacksDrastically reduce your spend

Qualys Cloud Platform.The revolutionary architecture that powersQualys’ IT security and compliance cloud apps.Out-of-Band PIsScannerAppliancesVirtualScannersSensors that provide youcontinuous visibilityWhether on premises, at endpoints, on mobile, incontainers or in the cloud, OT and IoT, Qualys CloudPlatform sensors are always on, giving you continuous2-second visibility of all your IT assets. Remotelydeployable, centrally managed and self updating, thesensors come as physical or virtual appliances, orlightweight agents. Our sensors also come nativelyintegrated with cloud infrastructure providers suchas AWS, Azure and GCP.Cloud ConnectorsAll data analyzed inreal timeCloud AppsQualys Cloud Platform provides an end-to-endsolution, allowing you to avoid the cost andcomplexities that come with managing multiplesecurity vendors. The Qualys Cloud Platformautomatically gathers and analyzes security andcompliance data in a scalable, state-of-the-artbackend. Provisioning any of Qualys’natively-integrated security and compliance apps –twenty and counting - is as easy as checking a box.Unique advantages of the Qualys Cloud PlatformNo hardware tobuy or manageLoweroperating costsNothing to install ormanage, and all servicesare accessible in thecloud via web interface.Qualys operates andmaintains everything.With everything in thecloud, there are no capitalexpenditures, no extrahuman resources needed,and no infrastructure orsoftware to buy andmaintain.Easy globalscanningSeamlessscalingEasily perform scans ongeographically distributedand segmented networks atthe perimeter, behind thefirewall, on dynamic cloudenvironments and endpoints.Qualys Cloud Platform isa scalable, end-to-endsolution for all aspects ofIT security. Once deployed,seamlessly add newcoverage, users andservices as you need them.

Qualys Cloud Platform in numbers3 billion 2 trillion 3 trillionIP Scans/Audits a YearSecurity EventsData Points Indexed onElasticsearch ClustersRespond to threatsimmediately99.9996%Six Sigma ScanningAccuracyALERT:New open port 890With Qualys’ Cloud Agent technology, there’sno need to schedule scan windows or managecredentials for scanning. And Qualys’ ContinuousMonitoring app lets you proactively addresspotential threats whenever new vulnerabilitiesappear, with real-time alerts to notify youimmediately.found on hostcorp.acme.comSee the results in one place,anytime, anywhereQualys Cloud Platform is accessible directly inthe browser, no plugins necessary. With an intuitive,single-pane-of-glass user interface for all its apps,it lets you customize dashboards, drill down intodetails, and generate reports for teammates andauditors.Up-to-dateresourcesQualys has the largestknowledge base ofvulnerability signatures inthe industry and performsover 3 billion IP scans peryear. All security updatesare made in real time.Data storedsecurelyVulnerability data issecurely stored andprocessed in an n-tieredarchitecture of load-balancedservers. Our encrypteddatabases are physicallyand logically secure.Available as a Public or PrivateCloud, on-premisesFull server rackFor governments, enterprises,and MSSPsVirtual rackFor governments, enterprises,and MSSPsStandaloneapplianceFor small businesses

Cloud Platform Apps.Qualys apps are fully integrated and natively share thedata they collect for real-time analysis and correlation.Provisioning another app is as easy as checking a box.ASSET MANAGEMENTAIGlobal IT Asset InventoryIt’s Free! Unlimited assetsSYNMaintain full, instant visibility of all globalIT assets wherever they reside (on prem, mobile,endpoints, clouds, containers, OT or IoT)CRICMDB SyncSynchronize asset information from Qualysinto the ServiceNow CMDBCertificate InventoryInventory TLS/SSL digital certificates ona global scaleIT SECURITYVMCMIOCVulnerability ManagementContinuously detect and protect againstattacks, anytime, anywhereContinuous MonitoringAlerts you in real time about networkirregularitiesIndication of CompromiseThreat hunting, suspicious activitymonitoring, and malware family detectionTPPMCRAThreat ProtectionPinpoint your most critical threats andprioritize patchingPatch ManagementStreamline and accelerate vulnerabilityremediation for all your IT assetsCertificate AssessmentAssess your digital certificates and TLSconfigurationsCLOUD/CONTAINER SECURITYCICSCloud InventoryInventory public cloud workloads andinfrastructureContainer SecurityDiscover, track, and continuously protectcontainersCSACloud SecurityAssessmentMonitor your cloud infrastructureagainst misconfiguration and non-standarddeployments

COMPLIANCE MONITORINGPCPCISAQPolicy ComplianceSCAAssess security configurations of ITsystems throughout your networkSecurity ConfigurationAssessmentAutomate configuration assessment of global assetsPCI ComplianceFIMAutomate, simplify and attain PCIcompliance quicklySecurity AssessmentQuestionnaireOCAMinimize the risk of doing business withvendors and other third partiesFile Integrity MonitoringLog and track file changes across globalIT systemsOut-of-Band ConfigurationAssessmentExtend security and compliance toinaccessible assetsWEB APPLICATION SECURITYWASWeb Application ScanningSecure web applications with end-to-endprotectionWannaCry DashboardWAFWeb Application FirewallBlock attacks and virtually patch webapplication vulnerabilitiesSEARCH.TOP 5 EOL/OBSOLETE OPERATING SYSTEMSTOP 5 MISSING MS17-010 PATCHMISSING MS17-010PATCHWANNACRY RANSOMEWAREDETECTED - AUTH ONLY245ASSETS WITH WANNACRYCustomizable, user-defined dynamic dashboard for real-timetracking progress of WannaCry remediation alerts

Solutions.Consolidate your security and compliance stackand keep your teams in sync.Infrastructure SecurityA single unified viewEverything you need for on-premises data centersecurity: asset inventory, passive and activescanning, vulnerability management and more.Cloud Infrastructure SecurityYou must secure the workloads being shiftedto public clouds. With native AWS, Azure and GCPintegrations, Qualys gives you instant visibilityinto these instances and full security andcompliance control.Endpoint SecurityudClolysQua tformPlappsWeb App SecuritynersIt’s never been easier for employees to bypassIT and install unsafe web apps. Qualys continuallydetects all your web apps – approved andunapproved – and provides continuous cloudbased On-The variety and quantity of endpoints on yournetwork continue to rise, and so do security andcompliance risks. With Qualys, you’ll continuouslydiscover, track and protect PCs, laptops, IoTdevices, smartphones, peripherals and otherendpoints.DevSecOpsQualys puts security into your DevOpsenvironment, automating the detection ofcoding and configuration errors in your iterative,collaborative software development lifecycle,prioritizing vulnerability remediation, shieldingweb apps and flagging hacker intrusions.ComplianceYou enforce compliance with complex internalpolicies, industry mandates and external regulations,and assess vendor risk. Qualys’ cloud-based solutionsgive you the clarity, control and flexibility you needto keep your organization compliant.

Building security and compliance for the digitaltransformation with the Qualys Cloud PlatformThe digital transformation is bringing new opportunities to your company—but alsoexposing it to new security risks. New vulnerabilities, regulations and tools are surfacingall the time. The Qualys Cloud Platform can guide your company through all of it.Streamline your ITsecurity operationsacross cloudsSave time and money with Qualys’ all-in-one, cloudbased solution. No hardware to install or software tomaintain. Avoid the gaps that come with trying toglue together siloed solutions.See it all in one place,anytime, anywhere, inreal timeSee your security and compliance posture in onebrowser window, without plugins or a VPN. No needto wait for reports to run—all the data is updated inreal time.Demonstrate andmaintain complianceRespond to auditors and regulations in a timely andaccurate manner. We help you show that therequired controls are in place and your environmentis continually compliant.Achieve IT, security and compliancein a single platform and drasticallyreduce your spend.“The Qualys Cloud Platformsimplifies the complexity associated withmanaging multiple security solutions,while at the same time increasing theautomation, effectiveness and proactivenature of security.”Robert AyoubResearch Director, SecurityProducts at IDC

About Qualys.The leading provider of cloud-basedIT, security and compliance solutions.Born in the cloud with a freshapproach to securityQualys, Inc. (NASDAQ: QLYS) is a pioneer andleading provider of cloud-based security andcompliance solutions with over 11,000customers in more than 130 countries, includinga majority of each of the Forbes Global 100 andFortune 100. Qualys helps organizationsstreamline and consolidate their security andcompliance solutions in a single platform andbuild security into digital transformationinitiatives for greater agility, better businessoutcomes and substantial cost savings.The Qualys Cloud Platform and its integratedcloud apps deliver critical security intelligencecontinuously, enabling businesses to automatethe full spectrum of auditing, compliance andprotection for IT systems and web applicationson-premises, on endpoints and elastic clouds.Trusted globallyOver 11,000 global businesses inmore than 130 countries trustQualys to streamline their securityand compliance solutions and buildsecurity into their digitaltransformation initiatives – forgreater agility, better businessoutcomes, and substantialcost savings.More than 70% of the ForbesGlobal 50 rely on Qualys:Try Qualys Global IT AssetInventory (it’s free) atqualys.com/inventoryYou can’t secure what you can’t see or don’tknow. Use Qualys’ free Global Asset Inventoryapp to discover and categorize all of yourknown and unknown assets that connect toyour global hybrid-IT environment. Fullycloud-based, it’s easy to deploy and manage!9 of the top 10 in Technology9 of the top 10 in Retail9 of the top 10 in Biotech7 of the top 10 in Banking7 of the top 10 in Chemical 2019 Qualys, Inc. All rights reserved. 9/19

Everything secure. Unparalleled visibility, end-to-end security and compliance for all your global IT assets The power of the Qualys Cloud Platform Complete, real-time inventory of all IT assets – wherever they reside Continuous assessment of your global security & compliance posture