Vulnerability disclosures are surging and IT teams cannot patch everything. Lavish Jhamb shows how Qualys TruRisk Eliminate and Agent Sara sort a backlog into remediation waves and use patch reliability scores to decide what is safe to deploy. Join us at ROCon Americas, October 13-15 in Austin, Texas: https://www.qualys.com/rocon/2026/americas Try Qualys ETM free for 30 days: https://www.qualys.com/free-trial-new/enterprise-trurisk-management This Black Hat USA 2026 session covers the full remediation toolbox: OS and third-party patching across Windows, Linux, and macOS, plus patchless options such as mitigations, uninstalling software you do not need, custom scripts, and isolation as a last resort. It also explains how the AI-based patch reliability score is built from public chatter about each patch and from observed rollback and reopen rates, and how that score decides whether to auto-deploy, phase the rollout, or mitigate instead. The live demo shows Agent Sara analyzing a backlog, creating low and high operational impact waves, and building ring-based deployment jobs that move from lab to staging to production with a human still in the loop. Qualys reports more than 150 million patches deployed in the past year, about 40 million of them fully autonomous. Speaker: Lavish Jhamb, Senior Manager, Product Management, TruRisk Eliminate, Qualys Chapters: 0:00 Intro 0:12 The Mythos-era vulnerability surge 1:22 TruRisk Eliminate: patch and patchless remediation 2:12 OS and third-party patching with zero-touch automation 2:39 Why every patch needs a reliability score 5:17 How the reliability score is built 7:03 Building trust in autonomous remediation 7:50 Agent Sara and remediation waves 11:39 Demo: Agent Sara builds a remediation plan 15:05 Demo: waves and ring-based deployment jobs 18:09 Wrap-up: keeping a human in the loop #BlackHat2026 #PatchManagement #ZeroDay

 39      1