Qualys’ ROCon 2026 conference highlighted the vendor’s commitment to providing solutions for the three key aspects of cloud security.

Risk operations instead of security operations. Qualys has always emphasized tackling business risk (uptime, availability, business criticality of infrastructure, and a minimized threat surface) instead of trying to fix every discovered vulnerability. At ROCon 2026, the vendor announced its plans to fortify its discovery, prioritization, and remediation triad in all of its solutions, including Enterprise TruRisk Management (ETM). Prioritization of resources and artifacts takes input from configuration artifacts (e.g., AWS configuration of EC2 instances, S3 buckets, Azure configuration of virtual machines, and Azure Blob Storage) but also from potential attack path maps and business users’ input.…