Bringing AI Code Security into Qualys ETM | Qualys
Summary: Qualys announced that its Enterprise TruRisk Management platform can ingest findings from AI code security tools such as Anthropic's Claude Code Security and OpenAI's Codex Security, which export structured findings as CSV with severity, location, weakness type, and CWE mapping. Qualys models these as a distinct Application SAST finding type on a typed repository asset, so they inherit TruRisk scoring, Finding Rules, Risk Workbench, and MITRE ATT&CK mapping alongside more than 100 existing production sources.
Why it matters: A code repository scanned by Claude Code Security today, Codex Security tomorrow, and an internal SAST tool is treated as one asset with three sources rather than three separate findings - the deduplication and ownership attribution that determines whether a finding ever reaches a named owner.
Read the original at Qualys Blog ↗
- Topics
- Governance, Risk & Compliance
- Related
- Upcoming Speaking Engagements Cyber Risks · Nov 14, 2026Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters Cyber Risks · Nov 13, 2026AI Doesn’t Have to Go Rogue to Break the World Cyber Risks · Nov 13, 2026