{“lastseen”:”2025-08-20T16:43:01″,”description”:”In fast-moving cloud environments like AWS, security teams face an uncomfortable truth: not every EC2 instance is being scanned, existing tools don\u2019t work across a diverse environment that includes long-lived and ephemeral assets, and visibility is never complete. Qualys research found that over 30% of virtual machines have high or critical vulnerabilities, and with blind spots in your scanning, you may miss these critical risks. \\n\\n## **Cloud Blind Spots Are Everywhere** \\n\\nThe reason not all instances are being scanned is workloads:\\n\\n * Are missing agents\\n * Lack SSM integration\\n * Have encrypted volumes\\n * Are so ephemeral that they spin up and disappear before traditional tools can catch them\\n\\n\\n\\nThese blind spots create gaps in visibility, weaken security posture, and force teams into constant firefighting. \\n\\n## **The Agentic AI-Powered Solution** \\n\\nQualys has introduced Agentic AI to change this game. With the added power of **Agentic AI in Enterprise TruRisk Management (ETM)** , the agents it feeds don\u2019t just identify VM blind spots\u2014they autonomously decide how to close them and take action. \\n\\nWhen you ask: \\n\\n_\u201cWhich of my EC2 instances aren\u2019t being scanned? Can you ensure they\u2019re covered?\u201d_ \\n\\nQualys doesn\u2019t simply report back. It investigates, decides, and **acts** \u2014with no need for manual scripting or chasing down assets. There are no blind spots left behind. \\n\\n## **How It Works** \\n\\nThe agentic AI, through Agent Vikram, focuses on three aspects:\\n\\n 1. Autonomous discovery\\n 2. Smart scan method selection\\n 3. Autonomous remediation\\n\\n\\n\\n### **Autonomous Discovery** \\n\\nAgent Vikram connects to your cloud provider using **existing cloud connectors** , instantly inventorying all VM instances. From there, it: \\n\\n * Detects assets **not currently under vulnerability scanning coverage** \\n * Flags blind spots before they become risks \\n\\n\\n\\n### **Smart Scan Method Selection** \\n\\nThe agent doesn\u2019t just discover unmonitored assets. It autonomously determines and applies the **best-fit scanning method for each workload,** based on its runtime state and system configuration**. For example, in an AWS Cloud Environment, it assesses the following** : \\n\\n * **API-based for connected instances** : It uses AWS SSM Agent for frictionless scans. \\n * **Agent-based for****long-running workloads** : If the Qualys Agent isn\u2019t installed, the agent deploys it remotely using authenticated scan credentials. \\n * **Snapshot-based****for stopped or short-lived instances** : Snapshots get scanned even if the instance isn\u2019t running. \\n * **Cloud perimeter scanning for internet****\u2011****facing assets:** Where traditional methods can\u2019t reach, tackles encrypted volumes and vendor-managed appliances with no agent or SSM support. \\n\\n\\n\\nThat\u2019s the power of Qualys FlexScan, enabling diverse scanning methods for full coverage across long-lived and ephemeral environments. \\n\\n### **Autonomous Remediation** \\n\\nDiscovery is just the beginning. If your environment is preconfigured (cloud connectors, scanner appliances, and remote auth scans), Agent Vikram goes beyond recommendations\u2014it **takes the wheel by** : \\n\\n * **Remotely installing agents** where needed \\n * **Setting up scan schedules** for ongoing coverage\\n * **Initiating scans immediately** to seal gaps before attackers can exploit them \\n\\n\\n\\n## **Why It Matters** \\n\\nThis isn\u2019t just automation\u2014it\u2019s **Agentic AI** in action. \\n\\nAgent Vikram continuously monitors your cloud for exposure gaps, applies context-aware decision-making, and closes those gaps **intelligently and securely**. You don\u2019t have to write scripts, maintain brittle workflows, or chase assets around your cloud. With agentic AI powering every scan, cloud blind spots are eliminated, and you get: \\n\\n * **Continuous, gap-free coverage** across any workload\\n * **Smarter scanning decisions** based on runtime state and environment \\n * **True \u201chands-off\u201d remediation** that strengthens your security posture without adding more work \\n\\n\\n\\n## **From Blind Spots to Full Visibility**\\n\\nAgentic AI represents a fundamental shift from endless manual effort to intelligent, autonomous cloud protection. It’s the evolution from chasing assets around your cloud to continuous, gap-free coverage that applies context-aware decision-making. With **Qualys Agentic AI** , your blind spots don\u2019t just get discovered\u2014they get eliminated. \\n\\nNo gaps. No guessing. No chasing. Just **smart, autonomous protection for your cloud.** \\n\\n* * *\\n\\n**Find out more about Agentic AI on the Qualys Enterprise TruRisk Management platform. **\\n\\nFind Out More\\n\\n* * *”,”published”:”2025-08-20T15:00:00″,”modified”:”2025-08-20T15:00:00″,”type”:”qualysblog”,”title”:”How Agentic AI\u00a0Helps with Adaptive Cloud Risk Assessment with Agent Vikram”,”source”:””,”references”:””,”id”:”QUALYSBLOG:F58215366F8CECF6C3627F6D076F7394″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/blog.qualys.com\/category\/product-tech”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-08-20T16:43:01″,”description”:”In fast-moving cloud environments like AWS, security teams face an uncomfortable truth: not every EC2 instance is being scanned, existing tools don\u2019t work across a…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,13,33,120,7,11,5],"class_list":["post-13741","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-qualysblog","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n