Next-Level Cyber Risk Control with Tru Risk 2.0 | Qualys
Summary: Qualys is introducing TruRisk 2.0 alongside its Enterprise TruRisk Management (ETM) module, launching in October 2024, which shifts vulnerability tracking from the Qualys Detection ID (QID) system to the CVE framework so risk from third-party tools can be aggregated in one platform. The new scoring replaces the prior average-of-all-QDS method with a maximum detection score approach, scores CVEs using the Qualys Detection Score with signals including CVSS, EPSS, and threat intelligence from over 25 sources, and adjusts scores every hour.
Why it matters: The old averaging method could raise an asset's risk score when a single low-scoring critical vulnerability was fixed, obscuring actual risk reduction - and under TruRisk 2.0, scores now shift every hour, so a stale dashboard view no longer reflects the asset's real posture.
Read the original at Qualys Blog ↗
- Topics
- Governance, Risk & Compliance
- Related
- Upcoming Speaking Engagements Cyber Risks · Nov 14, 2026Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters Cyber Risks · Nov 13, 2026AI Doesn’t Have to Go Rogue to Break the World Cyber Risks · Nov 13, 2026