CyberIndexBeta

Product

Qualys Endpoint Protection Platform (EPP) provides anti-malware protection through the Qualys Cloud Agent for Windows, Linux and Mac assets, alongside or independently of Qualys EDR. Endpoint Detection and Response includes integrated antimalware detection capabilities, providing additional real-time protection against the latest threats. Malware detection events can be viewed and analyzed from the Qualys Cloud Console, allowing customers to enrich malicious events with contextual events collected by EDR. EDR can be fully managed remotely on any endpoint with internet connectivity. It runs on Linux, macOS and Windows.

Current Version
7.14.32.410004
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

Qualys was founded in 1999 and was among the first security companies to deliver its product entirely as a cloud service rather than as software to install — an unusual choice at the time and the basis of its business since. It is headquartered in Foster City, California, and listed on Nasdaq. Its core business is knowing what an organisation has and what is wrong with it: vulnerability management, detection and response across servers, endpoints, cloud workloads and containers, with compliance and asset inventory built on the same platform and the same lightweight agent. Qualys Endpoint Protection, the product listed here, extends that agent into anti-malware and endpoint detection. It is bought by organisations that already run Qualys for vulnerability management and want one agent rather than two, which is the more useful way to read it than as a standalone competitor to the dedicated endpoint vendors here. Vendor page →

Website
qualys.com
Country
United States
Headquarters
Foster City, United States
Year Established
1999
Customers
10K organisations
Users
110M devices protected
Revenue
$669.1M (2025)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted Scanningnative
Heuristic Detectionnative
Device ControlNot known
Vulnerability ShieldingNot known
Central Management Consolenative

6 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 7.14.32.410004macOS
  • 7.9.9.381Windows
  • 7.0.5.410019Linux

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2024-12-11lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20242024-12-11
Technique-level detection: 20%Any detection: 48.9%Benign activity not alerted: 100%Attack sub-steps evaluated: 45

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-23New versionNew version: 7.9.9.381 (Windows)evidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedCloud-Assisted Scanning: built inevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-19Platform addedRuns on Windowsevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 7.14.32.410004 (macOS)evidence
  • 2026-09-09New versionNew version: 7.0.5.410019 (Linux)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 7.14.32.410004evidence
  • 2026-08-20Platform addedRuns on macOSevidence
  • 2026-08-20Platform addedRuns on Linuxevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.