Qualys Announces TruRisk Eliminate to Augment Patching

Qualys announces TruRisk Eliminate, an extension of its Patch Management platform that maps vulnerabilities to multiple remediation actions—including patches, non-patch mitigations (e.g., registry changes, service/configuration adjustments, software uninstall), and network isolation—using the same agent and workflows, fully integrated with VMDR to reflect reduced risk in reports. The offering comprises TruRisk Patch, TruRisk Mitigate, and TruRisk Isolate, enabling organizations to address vulnerabilities that lack patches or where patching poses unacceptable operational risk; an example with CVE-2024-1086 illustrates selecting between patching, configuration-based mitigation, or asset isolation based on business context.