Qualys Launches TruRisk Eliminate 2.0 With TruConfidence Engine

Qualys has announced TruRisk Eliminate 2.0, a new release that incorporates TruConfidence, a remediation intelligence and orchestration engine. According to Help Net Security, this update powers Qualys’ vision for Autonomous RemOps, a category designed for the frontier AI era. The platform combines autonomous remediation capabilities with orchestration tools to help organizations eliminate cyber risk at machine speed while maintaining business continuity.

The new engine is built on Qualys’ experience deploying half a billion patches, with fewer than 0.1% resulting in rollbacks. Of those deployments, 40% were executed autonomously. TruRisk Eliminate integrates these historical insights with current advances in remediation intelligence. This allows organizations to confidently manage complex environments without disrupting operations, addressing the critical constraint of remediation speed as AI accelerates vulnerability exploitation.

Context and Background

Traditional remediation processes relied on manual decisions, tickets, and point solutions that were not designed for current exploitation speeds. Security teams previously identified vulnerabilities while IT operations teams handled patching, creating a handoff built for timelines measured in weeks. Jon Nelson, principal advisory director at Info-Tech Research Group, noted that frontier AI has compressed those timelines to hours. He stated that neither team can close that gap alone using legacy methods.

TruConfidence transforms TruRisk Eliminate into an operating model for Autonomous RemOps by unifying capabilities introduced over the past two quarters. These include the AI-powered Patch Reliability Score, intelligent wave-based remediation orchestrated by Agent Sara, and peer-to-peer distribution. The engine also utilizes compensating controls with intelligence drawn from real-world patch deployments to reduce exposure with the least disruptive remediation paths.

Who Is Affected

Security and IT operations teams facing increasing pressure to remediate risks quickly are the primary targets for this solution. As AI accelerates both vulnerability discovery and exploitation, organizations must account for existing controls and select safe remediation paths. The platform helps avoid duplicate protections already provided by existing controls, ensuring that remediation efforts do not create unnecessary operational friction or duplicate existing security measures.

Organizations using complex environments where manual patching is too slow or risky may find value in the automated orchestration. The system verifies that remediation succeeded without disrupting business operations, a key requirement for maintaining resiliency. By integrating patch reliability scoring and progressive rollouts, the tool aims to provide a viable path for driving remediation at machine speed.

What should you do?

Security leaders should evaluate whether their current remediation processes can keep pace with AI-driven exploitation timelines. Teams should review existing controls to identify duplicate protections that could be leveraged by automated orchestration tools. Organizations should monitor vendor announcements for new autonomous remediation capabilities that integrate with their current security stacks to reduce manual handoffs and deployment risks.

What to do and how to stay safe: Qualys

• Review current patch management processes to identify bottlenecks caused by manual handoffs between security and IT operations teams.
• Assess existing compensating controls to determine if automated tools can leverage them to reduce exposure without full patching.
• Monitor vendor updates for autonomous remediation engines that offer reliability scoring and progressive rollout features.
• Verify that any new orchestration tool integrates with current security stacks to ensure seamless deployment and verification.

Step-by-step guide: Risk-Based Vulnerability Management: Prioritize Fixes by Actual Danger

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What is TruConfidence?

TruConfidence is a remediation intelligence and orchestration engine introduced by Qualys in TruRisk Eliminate 2.0 to power Autonomous RemOps.

How many patches has Qualys deployed to build this engine?

Qualys built the engine on data from half a billion patches, with less than 0.1% rollback and 40% deployed autonomously.

Why is autonomous remediation needed now?

Frontier AI has compressed exploitation timelines from weeks to hours, making traditional manual patching handoffs too slow to close security gaps.