Automate Asset Isolation to Meet Remediation Deadlines | Qualys

Summary: Qualys introduced TruRisk Eliminate, which automatically quarantines a host the moment a vulnerability remediation deadline passes with the vulnerability still open, executing natively through the Qualys Cloud Agent with no EDR integration required. The vendor describes a CISA KEV use case with a 14-day remediation window in which a QQL query matching an ACTIVE, NEW, or REOPENED KEV finding past its due date triggers the Isolate Host path, quarantining the host within seconds and logging each isolation with the rule, time, host, and reason.
What's compelling: The mechanism only fires when patching has already failed - no patch exists, a patch is delayed, or a remediation attempt failed - so the hosts it removes from the network are by definition the ones your team still needs to reach to fix. Qualys states patchless remediation, including this isolation path, is available exclusively to TruRisk Eliminate customers and not with Legacy Patch Management or VMDR.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026