Qualys Adds Security and Regulatory Policy Compliance to SaaS Offering

Published: April 16, 2008

by Alex Woodie

Qualys next week will begin selling a new compliance solution as part of its QualysGuard software as a service (SaaS) suite. The new offering, called Policy Compliance, is designed to help companies document their compliance with legal regulations as well as security policies, and keep the auditors off their backs.

The new QualysGuard Policy Compliance 1.0 offering focuses on passing audits and document compliance tied to corporate security policies, laws, and regulations, Qualys says. The offering allows users to scan their systems for compliance with a number of regulations: COBIT, ISO, NIST, Sarbanes-Oxley, HIPAA, GLBA, Basel II and others.

On the security front, Policy Compliance allows security managers to map compliance to security policies by asset group or by host, which allows them to meet the reporting requirements of individual internal policy or regulations, according to Qualys.

The new offering is a component of the newly announced QualysGuard Security and Compliance Suite. In addition to the Policy Compliance component, the suite includes QualysGuard Vulnerability Management, an established SaaS offering that is used by 3,400 organizations around the world, and PCI Compliance, an existing offering that scans applications for PCI compliance and generates reports.

Qualys will sell two versions of the new Security and Compliance Suite, including an Enterprise Edition that costs $25,000 per year and allows organizations to run an unlimited number of vulnerability and compliance scans in multiple locations and to receive scorecard reports. The company will also sell an Express Edition that costs $2,500 per year and gives customers access to unlimited vulnerability and compliance for a single location. Both offerings include 24x7 customer support.

QualysGuard Policy Compliance will become available to customers in the United States on April 22, and customers in the Europe, Middle East, and Asia region on May 22.

                     Post this story to del.icio.us
               Post this story to Digg
    Post this story to Slashdot