[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0AQeEbZGjnYve8B1i9F8-XFqxXNWfYNFNrc6yhVPpJk":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"d52eb0fd-160b-45ee-93f4-1c12afc6c86f","Automate Asset Isolation: Your Last Resort to Meet Remediation Deadlines","automate-asset-isolation-your-last-resort-to-meet-remediation-deadlines-fab33c","Executive Summary Remediation deadlines slip for reasons outside your control: a patch does not exist yet, a patch is delayed, or a remediation attempt fails. The outcome is the same either way: the host stays unpatched and stays on the network. TruRisk Eliminate closes that window by isolating the host automatically the moment your deadline […]","Qualys has introduced TruRisk Eliminate, a platform designed to automatically isolate hosts that fail to meet vulnerability remediation deadlines. This tool addresses common issues like non-existent or delayed patches, or failed remediation attempts, by quarantining the affected host from the network. It integrates with the Qualys Cloud Agent, eliminating the need for EDR integration and providing auditable logs for compliance.","Qualys TruRisk Eliminate automates host isolation to meet vulnerability remediation deadlines.","https:\u002F\u002Fblog.qualys.com\u002Fproduct-tech\u002F2026\u002F09\u002F15\u002Fautomate-asset-isolation-cisa-kev-deadlines","https:\u002F\u002Fik.imagekit.io\u002Fqualys\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FBlog-Images-1080x1080.Cloud_.Agent_.2025.Updates-7-3.png","2026-09-15T15:00:00+00:00","2026-09-15T16:00:28.452769+00:00",7,[17,20,23,25],{"name":18,"type":19},"TruRisk Eliminate","product",{"name":21,"type":22},"Qualys","vendor",{"name":24,"type":19},"Qualys Cloud Agent",{"name":26,"type":27},"EDR","technology","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":28,"icon":30,"name":31,"slug":32},null,"Tools","tools",[34,36,41,46],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",[],[21,18,24],{"controls":54,"vendors":138},[55,84,109],{"slug":56,"name":57,"problem":58,"products":59},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":85,"name":86,"problem":87,"products":88},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[89,94,101],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":90,"product_name":91,"url":92,"description":93},"axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":96,"url":99,"description":100},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"slug":110,"name":111,"problem":112,"products":113},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",[139],{"slug":140,"name":21,"logo_path":141,"roles":142},"qualys","\u002Fvendor-logos\u002Fqualys.png",[143],"reported_by",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":160},"automate-host-isolation-when-remediation-deadlines-are-missed","Automate Host Isolation When Remediation Deadlines Are Missed","Organizations frequently struggle to meet vulnerability remediation deadlines due to delayed patches, failed remediation attempts, or complex environments that slow response times. When vulnerable hosts remain connected to the network past their remediation window, they become active risk vectors that attackers can exploit. Qualys TruRisk Eliminate addresses this gap by automatically quarantining non-compliant hosts, effectively reducing the attack surface while remediation catches up. This matters because unpatched, network-connected assets are among the most common entry points for breaches — automation ensures that human delays don't translate into prolonged exposure. Auditable isolation logs also support compliance requirements, closing the gap between policy intent and operational reality.",[149,150,151,152,153,154,155,156,157,158,159],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST SI-3: Malicious Code Protection","NIST AC-4: Information Flow Enforcement","NIST SC-7: Boundary Protection","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities","ITIL Problem Management: Root Cause and Known Error Management","GDPR Article 32: Security of Processing (timely risk mitigation)",{}]