In this ROCon 2025 technical session, Abhishek Singh (VP, Product Management, Qualys), Abhinav Mishra (Director, Product Management – TotalCloud, Kubernetes & Container Security, Qualys), and Antonio Anderson (VP, Information Security & IT, Somos Inc.) explore how to bring risk operations to containers at scale — where workloads are ephemeral, attack surfaces evolve by the second, and security can’t afford to stand still. This session dives into how Qualys TotalCloud and Enterprise TruRisk Management (ETM) work together to unify visibility, automate container risk quantification, and strengthen defenses across the full container lifecycle — from build to runtime. Key takeaways include: •Understanding “Fix Left” — moving from shift-left theory to real operational maturity •Detecting and responding to toxic combinations of vulnerabilities and misconfigurations •Automating container hygiene, runtime protection, and compliance (CSPM + Kubernetes auditing) •Leveraging Continuous Assessment to update risk scores in real time without rescans •Streamlining developer alignment through ServiceNow integration and AI-powered workflows Guest speaker Antonio Anderson shares how Somos achieved over 80% visibility gains and 90% reduction in duplicate checks, using Qualys to unify tools, reduce noise, and strengthen collaboration between IT and DevOps. The session concludes with a live demo showing Agentic AI in action — autonomously detecting container attack paths, correlating risk context, and creating prioritized ServiceNow tickets to eliminate exposure faster. Recorded live at ROCon 2025 – The Risk Operations Conference, presented by Qualys.

 120      1