A new zero-day drops. How fast can you find it, prove it is exploitable, and fix it? Qualys engineering director Andrew Nelson walks through the full Qualys ETM workflow live. Join us at ROCon Americas, October 13-15 in Austin, Texas: https://www.qualys.com/rocon/2026/americas Try Qualys ETM free for 30 days: https://www.qualys.com/free-trial-new/enterprise-trurisk-management This Black Hat USA 2026 demo connects the Qualys agents in one flow through Rocky, the ETM orchestrator. It starts with an Adobe ColdFusion vulnerability, uses Agent Insta and InstaScan to find affected assets from software inventory with no scan, then hands off to Agent Val for TruConfirm exploit validation. You choose the autonomy mode: fully automated, semi-automatic with a human approving each step, or manual. After a mitigation is applied, exploit validation runs again to confirm the asset is no longer exploitable. TruConfirm also works on assets from other scanners and tools ingested into ETM. Agent Sara then turns a Patch Tuesday backlog into waves based on patch reliability, reboot needs, and asset type, with ring-based deployment that advances only when a success threshold is met (95% in the demo). The Q&A covers Intune export and ITSM integrations. Speaker: Andrew Nelson, Director, Engineering, Qualys Chapters: 0:00 Intro 0:49 Rocky and a new ColdFusion vulnerability 2:09 Agent Insta: detection with no scan 3:10 Agent Val: choose your autonomy mode 4:27 TruConfirm on assets from other tools 5:34 Mitigate and revalidate 7:09 Agent Sara: Patch Tuesday remediation waves 11:26 Ring deployments and full autonomous mode 14:37 Wrap-up 15:14 Q&A: Intune and ITSM integrations #BlackHat2026 #ExposureManagement #Qualys

 66      0