Optimizing Risk Discovery and Remediation with Qualys Gateway Service (QGS) | Qualys

Summary: Qualys describes its Gateway Service, included with the VMDR license, as a local caching and proxy layer between Cloud Agents and the TruRisk Platform so patch payloads are fetched once rather than downloaded individually by every asset. The post cites unpatched vulnerabilities as the driver of nearly 60% of cyber compromises and details recent changes including global certificate support, a concurrency limit raised from 2,000 to 10,000 connections via support request, authenticated proxy communication, and audit logging of gateway configuration changes.
Why it matters: The post attributes nearly 60% of cyber compromises to unpatched vulnerabilities, and the remediation bottleneck it addresses is bandwidth: large patch payloads distributed repeatedly across thousands of endpoints strain internal networks and internet links. The concurrency ceiling also sits at 2,000 simultaneous connections by default, with 10,000 available only through a support request, which sets the practical scale of a deployment.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026