[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqtbsfnEUmjfTM-KnH1SeFOqiZpacOdjut2d8ras3dEw":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"c02bf471-a2ab-465e-914a-39ea5e748e0c","Autonomous Remediation Is Already Running at Enterprise Scale","autonomous-remediation-is-already-running-at-enterprise-scale-6aca27","The following is a guest blog by ITSPmagazine, based on their interview of Qualys President & CEO Sumedh Thakar at Black Hat USA 2026. Sumedh Thakar has watched the same clock compress for 23 years. He joined Qualys as an early software engineer on the scanner, when organizations scanned once every 90 days and gave […]","Qualys President & CEO Sumedh Thakar highlighted the shift towards autonomous remediation in enterprise security at Black Hat USA 2026. He emphasized the need for speed, with remediation expectations now measured in seconds or hours, driven by AI-powered threats and CISA directives. Qualys's approach focuses on AI-speed detection, hyper-prioritization, and autonomous remediation, including AI-driven patch reliability scoring and automated patching, with a global company successfully deploying 40 million patches autonomously.","Qualys CEO discusses autonomous remediation for enterprise security at Black Hat USA 2026.","https:\u002F\u002Fblog.qualys.com\u002Fqualys-insights\u002F2026\u002F09\u002F29\u002Fautonomous-remediation-enterprise-scale-black-hat-2026-sumedh-thakar","https:\u002F\u002Fik.imagekit.io\u002Fqualys\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FBlog-Images-1080x1080.Cloud_.Agent_.2025.Updates-6.png","2026-09-29T15:00:00+00:00","2026-09-29T16:00:21.615695+00:00",7,[17,20,23,26],{"name":18,"type":19},"Qualys","vendor",{"name":21,"type":22},"InstaScan","product",{"name":24,"type":25},"AI","technology",{"name":27,"type":28},"Black Hat USA 2026","campaign","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":29,"icon":31,"name":32,"slug":33},null,"Threat Intelligence","threat-intelligence",[35,40,45,50],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":31,"name":48,"slug":49},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":51},{"id":29,"icon":31,"name":32,"slug":33},[],[18,21],{"controls":55,"vendors":141},[56,85,112],{"slug":57,"name":58,"problem":59,"products":60},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":86,"name":87,"problem":88,"products":89},"patch-management","Automated patch management","Known holes get closed in days, not months.",[90,98,104],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":99,"vendor_name":18,"vendor_logo":100,"product_slug":86,"product_name":101,"url":102,"description":103},"qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":113,"name":114,"problem":115,"products":116},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"splunk","Splunk","\u002Fvendor-logos\u002Fsplunk.png","splunk-soar","Splunk SOAR","https:\u002F\u002Fwww.splunk.com\u002Fen_us\u002Fproducts\u002Fsplunk-security-orchestration-and-automation.html","Security orchestration and automation that runs playbooks to investigate and respond to incidents in seconds.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"prophet-security","Prophet Security","\u002Fvendor-logos\u002Fprophet-security.png","prophet-ai-soc-analyst","Prophet AI SOC Analyst","https:\u002F\u002Fwww.prophetsecurity.ai\u002Fai-soc-analyst","Triages and investigates alerts on its own and explains each conclusion, to speed up response and cut manual work.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-triage","Agentic Triage and Investigation","https:\u002F\u002Fvega.io\u002Fplatform\u002Ftriage","AI agents investigate every alert and hand analysts a verdict with the evidence behind it.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":156},"autonomous-remediation-redefines-enterprise-patch-speed-expectations","Autonomous Remediation Redefines Enterprise Patch Speed Expectations","The growing sophistication of AI-powered threats and regulatory pressure from CISA directives have exposed a critical gap: traditional manual patching cycles are far too slow to keep pace with modern attack timelines. Organizations that rely on human-driven remediation workflows measured in days or weeks are leaving exploitable windows wide open. The shift to autonomous, AI-driven remediation — exemplified by a global enterprise deploying 40 million patches autonomously — demonstrates that speed and reliability can coexist at scale. This matters because threat actors increasingly exploit vulnerabilities within hours of disclosure, making sub-day remediation not just aspirational but operationally necessary. Enterprises that fail to modernize their patch pipelines risk systemic exposure during the widening gap between vulnerability discovery and remediation.",[147,148,149,150,151,152,153,154,155],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management Planning","NIST SP 800-137: Information Security Continuous Monitoring (ISCM)","NIST CSF 2.0: RS.MI-3 (Respond – Mitigation)","CISA Known Exploited Vulnerabilities (KEV) Catalog Remediation Deadlines","NIST SP 800-53 SI-2: Flaw Remediation","ITIL 4: Change Enablement Practice (automated change management)","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities",{"NIST SP 800-53 SI-2: Flaw Remediation":157,"NIST CSF 2.0: RS.MI-3 (Respond – Mitigation)":158,"CIS Control 12: Network Infrastructure Management":159,"CIS Control 7: Continuous Vulnerability Management":160,"ITIL 4: Change Enablement Practice (automated change management)":161,"NIST SP 800-137: Information Security Continuous Monitoring (ISCM)":162,"NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management Planning":163,"ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities":164,"CISA Known Exploited Vulnerabilities (KEV) Catalog Remediation Deadlines":165},"Flaw remediation must happen within risk-appropriate timeframes, which manual cycles increasingly fail to meet.","Mitigating newly identified vulnerabilities quickly is the outcome automated remediation aims to deliver.","Network infrastructure is often patched slowly, yet edge devices are prime targets, so automation helps close the gap.","Continuous vulnerability management must shorten patch timelines to match attacks that move faster than manual cycles.","Automated change enablement allows routine patches to be deployed quickly while keeping control and audit.","Continuous monitoring provides the real-time vulnerability data that autonomous remediation relies on.","Patch management planning sets risk-based timelines and automation, the shift this article argues for.","Managing technical vulnerabilities requires timely remediation, which automation helps achieve at scale.","KEV deadlines set clear expectations for remediating actively exploited flaws, adding regulatory pressure for speed."]