22 April 2008

Qualys offers Web-based security software-as-a-service

Steve Gold , reporting from Infosecurity Europe 2008

Qualys has taken the wraps off its QualysGuard offering.

Based on its existing software-as-a-service (SAAS) business model, the Web-based facility is designed to bridge the gap between out-sourced security and the need for governance and compliance.

Philippe Courtot said that the Internet-based service gives customer the same level of IT security facilities they would get from an on-network set of hardware/software-based security technologies, but on an outsourced basis with an on-demand Web interface to control the service.

"It moves IT security into the realm of an on-demand outsourced service that is paid for on a subscription basis," Courtot told Infosecurity Magazine, adding that, in return for an annual fee, enterprises get access to a policy compliance suite of software and services that will meet their legal and regulatory requirements, as well as servicing their security needs.

"We've reached the stage with Qualys' SAAS business model where we're servicing the needs of around 35 per cent of the Forbes 100 top companies, so the launch of the QualysGuard service is a logical next step for us," he said.

"The key feature of this new service is that there is no central set of servers providing this security facility, as has been the case with previous outsourced security offerings. The customer interface is via a Web browser, and the service is delivered across the Internet," he added.

According to Courtot, this business model makes life very simple for the IT security manager, auditors and compliance officers within a major enterprise, both in terms of security systems deployment, their monitoring, and audit logging.

Pricing on the new service, which has been trialed by a number of the firm's customers, including Standard Chartered Bank, starts at around 20,000 pounds. The service will be formally launched in late May.

News index