Qualys TotalCloud
2026-07-27-42fb5bb3 commercialThe section your link pointed to isn't on Qualys TotalCloud's page any more, so we've brought you to the top.
Qualys TotalCloud is a cloud security platform providing vulnerability management, compliance monitoring, and threat detection across cloud infrastructure.
Summary
Qualys TotalCloud is a commercial cloud-native application protection platform (CNAPPCNAPPA cloud-native application protection platform that combines checks across cloud configuration, workloads and development. It helps teams connect risks that separate tools might report apart.) that scans cloud workloads for vulnerabilities and misconfigurations, run as a SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. service deployed into a customer's AWS environment rather than installed locally. It covers serverless workloads specifically, scanning AWS Lambda functions for vulnerable open-source packages and outdated libraries that CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. posture checks alone would miss, and it triggers automatically whenever a function is created or updated, across same-account and cross-account, multi-region setups deployed via CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call.. It is aimed at cloud security and DevSecOps teams responsible for AWS workloads rather than at developers writing the functions themselves. Findings feed into TruRisk Scoring and unified attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. analysis, tying Lambda vulnerabilities to permissions and exposure data from CSPM to prioritize what matters.
Qualys TotalCloud is a cloud security platform providing vulnerability management, compliance monitoring, and threat detection across cloud infrastructure.
Qualys TotalCloud publishes no documentation we track, so the description above is written from general knowledge rather than the vendor's own words.
How Qualys TotalCloud helps
Which of my serverless functions are running code with known vulnerable packages?
scans the deployed function code for open-source packages and outdated libraries, flagging vulnerabilities that posture checks alone would never see inside the package contents
Did a function I just deployed or updated introduce a new vulnerability?
triggers a scan automatically the moment a function is created or updated, so newly introduced flaws surface without anyone having to kick off a check
Are functions in accounts and regions outside my main setup being checked too?
covers same-account and cross-account, multi-region deployments once the integration is rolled out, so functions outside the primary account are not left unscanned
Which of these vulnerabilities actually matter given how exposed the function is?
ties the vulnerability findings to the function's permissions and exposure data from cloud posture checks and produces a risk score and attack path view that ranks what to fix first
Screenshots
From the release notes, newest first. Click one to see it full size.Release-note detail over time
See how much detail Qualys TotalCloud puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.
Checking release-note history…
Website history
qualys.com, every changeQualys's home page and 40 more pages as they looked each month from August 2021 to October 2026: 155 renders, 84 changes of tagline or palette. Step through them, play them, or put any two months side by side.
Website history is included with Researcher and Business.
See plans → Already subscribed? Sign in →← → or h l a month · Shift a year · [ ] previous / next change · Space play · 1 2 3 page · T whole page · C compare · F full size
← → or h l the right month · Shift the left · S swap · W wipe · T whole page · Esc back
Rebranding timeline
Dates bound when a change appeared between captures. Possible rebrands are AI suggestions; a redesign alone does not establish a rebrand.
Releases
1 entry
No entries match these filters.
- July 20261
Add the badge to your README
Maintain this project? The badge links readers straight to this page, so they can follow every release here.
Choose a badge style and copy the code →