Qualys Announces TruConfidence Engine for Autonomous Remediation

Summary
Qualys says TruRisk Eliminate 2.0 uses TruConfidence and Agent Sara to select and stage remediation, including patchless fixes, then monitor deployments and roll back on anomalies. The company reports deploying 178 million patches in the past year.
Key points
- Qualys says TruConfidence selects remediation paths for validated exposures, including patching, mitigation, software removal, host isolation, or custom scripts.
- AI-Powered Patch Reliability Scoring predicts patch deployment safety using global telemetry and customer deployment data, according to Qualys.
- Agent Sara organizes remediation into risk-based waves and progressive deployment rings; low-reliability signals can pause rollout.
- The system monitors CPU, memory, and service health after changes and can trigger rollback when anomalies arise.
- Qualys says human approval is required for changes involving critical services, identity infrastructure, or production databases.
- Qualys reports deploying 178 million patches in the past year, 40 million fully autonomously, with a rollback rate below 0.1%.
Article Details
- Event Type
- Product announcement: Qualys introduced TruRisk Eliminate 2.0 and its TruConfidence remediation and orchestration engine for autonomous vulnerability remediation.
- Impact
- Qualys says the platform selects remediation actions, deploys changes in customer-defined waves and progressive rings, monitors operational health, and can automatically pause rollouts or roll back when anomalies arise. The company reports that it deployed 178 million patches in the past year, including 40 million fully autonomously, with a rollback rate under 0.1%; these figures are company-reported.
Vendors
Products
Agent Saraengine, determines the safest, most effective way to eliminate each validated exposure while Agent Sara, Qualys’ risk remediation AI agent, executes these plans in customer-defined waves and progressiveAgent ValFirst, Qualys ETM and Agent Val validate what must be fixed.Qualys ETMFirst, Qualys ETM and Agent Val validate what must be fixed.TruConfidenceMeet TruConfidence: Remediation Intelligence You Can TrustTruConfirmSecond, TruConfirm credits the controls already in place.TruRisk Eliminate 2.0TruConfidence: The AI-Powered Remediation Intelligence & Orchestration engine powering TruRisk Eliminate 2.0 delivers autonomous remediation at scale with proof at every step.
