Qualys Expands Global mROC Alliance with New Technology Alliances Across Every Major Attack Surface and Partner Certification Tracks

Qualys (QLYS) expanded its global mROC program with technology alliance partners covering mobile devices, connected and industrial systems, and identity security.

Rhea-AI Summary

Qualys (QLYS) expanded its global mROC program with technology alliance partners covering mobile devices, connected and industrial systems, and identity security. The partners include Claroty, Lookout, NowSecure, Nozomi Networks and Okta. Their security data feeds into Qualys Enterprise TruRisk Management to assess and prioritize risks alongside other enterprise exposures.

Qualys also introduced Authorized mROC Advisor and Authorized mROC Delivery & Implementation Partner certification tracks. These cover risk-program assessment and planning, and platform deployment and integration, respectively. They join the existing mROC Partner role for managed Risk Operations Center services.

Key Figures

New partner authorization tracks: 2 tracks

New partner authorization tracks

2 tracks

Authorized mROC Advisor and Authorized mROC Delivery & Implementation Partner

Key Terms

operational technology, internet of things, sdk, sla

4 terms

operational technology technical

"operational technology (OT) and internet of things (IoT)"

Operational technology is the physical equipment and specialized software that directly control machines, sensors and processes in factories, energy grids, transportation systems and buildings — think of it as a facility’s control panel and nervous system. Investors care because problems, upgrades or cyberattacks in this area can halt production, raise costs, require large capital spending, or trigger safety and regulatory issues that affect revenue and valuation.

internet of things technical

"operational technology (OT) and internet of things (IoT)"

A network of everyday objects—like appliances, machines, vehicles, and sensors—connected to the internet so they can send and receive information and act automatically, like a thermostat that learns your schedule or a factory machine that reports wear. Investors care because these connected devices create new revenue streams, recurring service and data opportunities, and efficiency gains, while also concentrating risks such as security vulnerabilities and ongoing maintenance costs.

sdk technical

"vulnerabilities in embedded third-party SDKs"

An SDK (software development kit) is a bundled set of tools, code samples and instructions that lets outside developers build software that works with a company’s platform or product. Think of it as a toolbox and recipe that makes it faster and easier for others to create compatible apps or services. For investors, an SDK matters because widespread developer use can boost product adoption, create new revenue streams and strengthen customer lock‑in, signaling potential future growth.

sla technical

"from prioritization through remediation and SLA-based reporting"

A Service Level Agreement (SLA) is a formal contract that sets clear, measurable promises about the quality and timing of services a company will deliver, such as uptime, response times or support availability. For investors, SLAs matter because they signal how reliable a company’s operations or partners are, influence customer satisfaction and retention, and can impose financial penalties or credits if those promises are broken—similar to a warranty that ties payment to performance.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Customers gain superior visibility with Qualys-powered Risk Operations Center for the frontier AI era

FOSTER CITY, Calif., Nov. 9, 2026 /PRNewswire/ -- Qualys, Inc. (NASDAQ: QLYS), a leading cloud-native cyber risk management company, today announced the expansion of its global mROC program to include strategic technology alliance partners across every major attack surface – mobile, OT/ IoT, and identity, including Claroty, Lookout, NowSecure, Nozomi Networks, and Okta. Telemetry from these partners brings risk from some of the least-measured parts of the enterprise into Qualys Enterprise TruRisk Management (ETM), so organizations can possess a holistic view of their cyber risk across their environment.

Frontier AI models discover software vulnerabilities faster than any security team can triage by hand, and adversaries have access to the same capability. Yet most security programs remain split across dozens of tools, each with its own severity score and no shared view of what is actually exploitable. In this environment, finding more vulnerabilities only deepens the backlog. The problem is compounded since many of the fastest-growing parts of the attack surface are also the least measured. Phones, connected devices, industrial and medical systems, and identities often cannot run a traditional agent or tolerate active scanning, so their risk goes unmeasured or sits in a separate tool with its own scoring.

Through the expanded technology alliances, partner telemetry flows into Qualys ETM where TruRisk, Qualys' proprietary scoring and prioritization engine, evaluates it alongside data from across the enterprise. This gives CISOs a unified TruRisk score, a prioritized list for remediation workflows, and a defensible view of risk to report to the board.

Organizations benefit from measuring risk across these major attack surfaces in Qualys ETM:

• Mobile (Lookout and NowSecure) – Provides continuous visibility into mobile device security posture, OS vulnerabilities, and application-level risks identified through advanced binary analysis, including vulnerabilities in embedded third-party SDKs. By incorporating these risks into a unified TruRisk score, organizations can consistently assess and prioritize mobile exposure alongside traditional endpoints, including servers and laptops.
• OT and IoT (Claroty and Nozomi Networks) – Integrates passive asset discovery and vulnerability data for operational technology (OT) and internet of things (IoT) such as industrial control systems, medical devices, and building management systems. Exposures that cannot be scanned or patched become visible and prioritized, with compensating mitigations tracked in the same remediation workflow.
• Identity (Okta) – Incorporates identity posture telemetry, such as misconfigured, over-privileged or exposed accounts and credentials. An at-risk account is weighed alongside the systems it can reach, so teams fix the exposures an attacker would use to move laterally.

New partner authorization tracks for the Global mROC Alliance
Qualys also announced two new partner authorization tracks: Authorized mROC Advisor and Authorized mROC Delivery & Implementation Partner. The new tracks give customers a faster, verified path to standing up a Risk Operations Center (ROC) to better defend against the surge of AI-discovered vulnerabilities and AI-enabled adversaries.

The invite-only Global mROC Alliance now certifies partners across three Partner Roles, so customers can engage the right partner at every stage of ROC adoption — from strategy to deployment to fully managed operations:

• Authorized mROC Advisor (new) – Certified to assess a customer's risk program, define TruRisk-based priorities, and design the customer's ROC operating model and adoption roadmap.
• Authorized mROC Delivery & Implementation Partner (new) – Certified to deploy ETM, integrate it with the customer's existing security stack, including third-party findings and technology alliance telemetry, and stand up ROC workflows.
• mROC Partner – Certified to run the customer's ROC as a managed service on ETM, from prioritization through remediation and SLA-based reporting.

"PHP2Shell was a wake-up call for the industry. The vulnerability existed for years, but AI dramatically changed the economics of discovery and exploitation, enabling adversaries to weaponize exposures at a speed that far exceeds traditional response cycles," said Cade Stephens, vice president of global channels and strategic alliances at Qualys. "Our expanded Global mROC Alliance brings together the power of the Qualys platform, strategic technology alliance partners, and a global ecosystem of highly trained Risk Operations Center experts to help customers operationalize cyber risk management at scale and outpace threats in the age of AI."

Additional Resources            

• Read our blog post, "The Expanding Attack Surface Demands a New Operating Model"
• Watch the video, "Qualys x Partners: Turning Vulnerabilities into a Business Risk Conversation"
• Learn more about the Qualys Global mROC Alliance 
• Follow Qualys on LinkedIn, Instagram and X

About Qualys
Qualys, Inc. (NASDAQ: QLYS) is a leading cloud-native cyber risk management company, helping organizations measure, communicate, and eliminate cyber risk. The Qualys platform and its solutions power the Risk Operations Center (ROC), unifying asset visibility, exposure management, risk prioritization, and remediation to help organizations continuously reduce risk across hybrid, multi-cloud, endpoint, and AI environments. Qualys equips security and IT teams for the Frontier AI Era with AI-speed detection, hyper-prioritization, and autonomous remediation. Trusted by more than 10,000 organizations globally, including most of the Fortune 100, Qualys helps customers transform cybersecurity into a measurable business function that strengthens resilience and drives business outcomes. For more information, visit www.qualys.com.

Media Contact:   
Rachel Yap Winship 
Qualys
Media@Qualys.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/qualys-expands-global-mroc-alliance-with-new-technology-alliances-across-every-major-attack-surface-and-partner-certification-tracks-302932770.html

SOURCE Qualys, Inc.