New technology integrations and partner certification tracks aim to give enterprises a unified view of cyber risk as AI accelerates vulnerability discovery and exploitation.
Qualys has expanded its global Managed Risk Operations Center (mROC) Alliance with technology partners covering some of the enterprise’s least-measured attack surfaces, including mobile devices, operational technology (OT), the Internet of Things (IoT) and identity systems.
The expanded alliance includes Claroty, Lookout, NowSecure, Nozomi Networks and Okta. Their telemetry will feed into Qualys Enterprise TruRisk Management (ETM), enabling organisations to assess exposures across these environments through a common risk framework.
The move addresses a growing challenge for security teams: frontier AI models are accelerating vulnerability discovery, while attackers can use similar capabilities to identify and exploit weaknesses faster than conventional security operations can respond. At the same time, enterprise risk remains fragmented across security tools with different severity ratings and limited visibility into actual exploitability.
“Our expanded Global mROC Alliance brings together the power of the Qualys platform, strategic technology alliance partners, and a global ecosystem of highly trained Risk Operations Center experts to help customers operationalize cyber risk management at scale and outpace threats in the age of AI.”
— Cade Stephens, Vice President of Global Channels and Strategic Alliances, Qualys
Mobile devices, connected equipment, industrial systems and identities are particularly difficult to assess. Many cannot accommodate traditional security agents or active scanning, leaving exposures unmeasured or isolated in separate platforms.
Through the expanded integrations, Qualys ETM applies its proprietary TruRisk scoring and prioritisation engine to partner telemetry alongside enterprise-wide security data. This is designed to provide CISOs with a consolidated risk view, prioritised remediation actions and a clearer basis for communicating cyber risk to business leadership.
The integrations cover three key areas. Lookout and NowSecure provide mobile security posture, operating-system vulnerability and application-risk information, including weaknesses in embedded third-party software components. Claroty and Nozomi Networks contribute passive asset discovery and vulnerability data from OT and IoT environments, including industrial control, medical and building-management systems. Okta adds identity posture information, helping identify misconfigured, over-privileged or exposed accounts and credentials in the context of the systems they can access.
Qualys has also introduced two new authorisation tracks for the Global mROC Alliance: Authorized mROC Advisor and Authorized mROC Delivery & Implementation Partner. The existing mROC Partner role covers managed operations.
The three roles are intended to support customers through different stages of establishing a Risk Operations Center. Advisors help assess risk programmes and design operating models; delivery and implementation partners deploy ETM, integrate existing security tools and establish workflows; and mROC Partners operate the ROC as a managed service, overseeing prioritisation, remediation and SLA-based reporting.
Cade Stephens, Vice President of Global Channels and Strategic Alliances at Qualys, said the PHP2Shell vulnerability demonstrated how AI is changing the economics of vulnerability discovery and exploitation. The expanded alliance, he added, combines the Qualys platform, technology partners and trained ROC specialists to help organisations scale cyber risk management.
The broader strategy reflects a shift from simply identifying more vulnerabilities to determining which exposures present the greatest business risk and coordinating remediation across increasingly complex enterprise environments.
