Foster City – November 10, 2026 -- Qualys (NASDAQ: QLYS) has expanded its global mROC program to five strategic technology alliance partners (Claroty, Lookout, NowSecure, Nozomi Networks and Okta), feeding risk data from mobile, OT/IoT and identity systems into its Enterprise TruRisk Management (ETM) platform.
Partner telemetry flows into a single TruRisk score
Qualys says these attack surfaces are among the least measured in the enterprise. Phones, connected devices, industrial and medical systems, and identities often cannot run a traditional agent or tolerate active scanning. Their risk therefore goes unmeasured or sits in a separate tool with its own scoring.
Under the expanded alliances, partner telemetry enters ETM, where the TruRisk scoring and prioritization engine evaluates it alongside data from across the enterprise. CISOs receive a unified TruRisk score, a prioritized list for remediation workflows, and a view of risk they can report to the board.
Lookout and NowSecure bring mobile exposure into view
The mobile integrations cover device security posture, OS vulnerabilities and application-level risks found through binary analysis, including flaws in embedded third-party SDKs. Organizations can assess mobile exposure alongside servers and laptops.
Claroty and Nozomi Networks cover OT and IoT assets
The two vendors supply passive asset discovery and vulnerability data for industrial control systems, medical devices and building management systems. Exposures that cannot be scanned or patched become visible and prioritized. Compensating mitigations are tracked in the same remediation workflow.
Okta adds identity posture to risk scoring
Okta's telemetry covers misconfigured, over-privileged or exposed accounts and credentials. ETM weighs an at-risk account against the systems it can reach, so teams can fix the exposures an attacker would use to move laterally.
Two new partner tracks join the invite-only Global mROC Alliance
Qualys also introduced the Authorized mROC Advisor and Authorized mROC Delivery & Implementation Partner tracks. The Alliance now certifies partners in three roles:
- Authorized mROC Advisor (new): assesses a customer's risk program, defines TruRisk-based priorities, and designs the Risk Operations Center (ROC) operating model and adoption roadmap.
- Authorized mROC Delivery & Implementation Partner (new): deploys ETM, integrates it with the existing security stack, including third-party findings and alliance telemetry, and stands up ROC workflows.
- mROC Partner: runs the customer's ROC as a managed service on ETM, from prioritization through remediation and SLA-based reporting.
Qualys frames the program as a response to frontier AI models that find software vulnerabilities faster than security teams can triage them by hand, while adversaries use the same capability. It says security programs split across dozens of tools, each with its own severity score, only deepen the backlog as more vulnerabilities are found.
Cade Stephens, vice president of global channels and strategic alliances at Qualys, called the PHP2Shell vulnerability "a wake-up call for the industry." He said the flaw existed for years, but AI changed the economics of discovery and exploitation, letting adversaries weaponize exposures faster than traditional response cycles.