Qualys has launched TruRisk Eliminate 2.0 with TruConfidence, introducing an AI-powered approach to cyber risk remediation that aims to help security teams address vulnerabilities at machine speed without disrupting business operations. The platform advances the company’s vision for Autonomous RemOps, which focuses on coordinating security remediation through intelligence, automation and controlled deployment.
The launch comes as artificial intelligence accelerates the discovery and exploitation of vulnerabilities, placing greater pressure on organisations to resolve exposures quickly. Security teams must identify which vulnerabilities require action, account for existing security controls, select appropriate remediation methods and verify that changes have not affected business services. Qualys said traditional processes based on manual decisions, tickets and separate tools are increasingly challenged by these demands.
TruConfidence serves as the intelligence engine behind TruRisk Eliminate, bringing together AI-powered patch reliability scoring, wave-based remediation orchestrated by Agent Sara, peer-to-peer distribution and compensating controls. The capabilities draw on Qualys’ experience of deploying half a billion patches, with a reported rollback rate of less than 0.1 per cent and 40 per cent of deployments completed autonomously.
The system is designed to help organisations determine the minimum action needed to reduce exposure, account for protections already provided by existing controls and select the most suitable remediation path. It also coordinates deployment and checks whether the remediation remains effective, reducing unnecessary changes and the risk of operational disruption.
TruRisk Eliminate 2.0 extends remediation beyond agent-based endpoints to perimeter devices, cloud environments and applications. Organisations can patch vulnerabilities, apply mitigations without a patch, uninstall software, isolate assets or implement custom fixes. Assets that cannot run an agent can be addressed through Qualys scanners and existing security and IT integrations.
When patching is not immediately possible or appropriate, TruConfidence evaluates existing protections and identifies compensating controls that can be applied through security tools already deployed across the organisation. This approach is intended to reduce exposure while a permanent fix is being planned or validated, rather than leaving vulnerabilities unaddressed until a patch becomes available.
The platform also focuses on maintaining service stability after remediation. Through integrations with partners such as Dynatrace, it monitors system health for issues including CPU spikes, memory problems and other conditions that could affect services. Its AI-powered Patch Failure Analysis can investigate unsuccessful fixes and recommend corrective action, including rollback where necessary.
Jon Nelson, Principal Advisory Director in the Security & Privacy practice at Info-Tech Research Group, said the shift towards AI-driven exploitation had shortened the time available to address vulnerabilities. He noted that capabilities such as patch reliability scoring, progressive rollouts and patchless mitigation could help security teams accelerate remediation while reducing the risk of operational disruption.
Sumedh Thakar, President and Chief Executive Officer of Qualys, said organisations’ hesitation around automated remediation often stems from concerns about potential outages rather than automation itself. He said TruRisk Eliminate with TruConfidence is intended to turn remediation intelligence into action through the company’s Risk Operations Center (ROC), helping organisations reduce cyber risk while addressing concerns about business continuity.
Qualys TruRisk Eliminate 2.0 with TruConfidence is now generally available. Existing TruRisk Eliminate customers can upgrade at no additional cost. Qualys also presented its vision for RemOps and the role of the Risk Operations Center at ROCon Americas 2026, held on October 14–15 in Austin, Texas.
Send news announcements/press releases to:
jeevika@thefoundermedia.in
About The Author
