Qualys expands TotalAI to boost AI security from development onwards
The enhancements are designed to address the rapid pace of AI adoption in business, which often outpaces the implementation of necessary security controls.
Citing a recent study where 72% of CISOs expressed concerns that generative AI solutions could cause security breaches within their organisations, Qualys aims to provide tools to help bridge the gap between innovation and secure implementation.
Summarising the need for integrated security in AI operations, Tyler Shields, Principal Analyst at Enterprise Strategy Group, said, "As AI becomes a core component of business innovation, security can no longer be an afterthought. Qualys TotalAI ensures that only trusted, vetted models are deployed into production, enabling both agility and assurance across organisations' AI usage."
"This security helps organisations achieve their innovation goals while managing their risk."
TotalAI has been updated to test models for jailbreak vulnerabilities, bias, sensitive information exposure, and critical risks mapped to standards such as the OWASP Top 10 for LLMs. The platform also supports enterprise teams in resolving exposures, protecting operational resilience, and maintaining brand trust.
Among the new features is automatic prioritisation of AI security risks, with findings mapped to real-world adversarial tactics using MITRE ATLAS and prioritised by the TruRisk scoring engine.
This allows teams across security, IT, and MLOps to focus on the most business-critical risks within their AI operations.
The release also includes an on-premises internal LLM scanner to support security testing during development, staging, and deployment. This capability enables security and testing of AI-powered applications to be integrated into existing CI/CD workflows, ensuring that models remain protected behind corporate firewalls and are not exposed externally at any stage during their lifecycle.
TotalAI's expanded threat coverage now includes detection of 40 distinct attack scenarios. These cover advanced jailbreak techniques, prompt injections, manipulations, multilingual exploits, and bias amplification. The platform simulates real-world adversarial tactics to increase model resilience against exploitation and better protect against attackers attempting to manipulate AI outputs or bypass model safeguards.
Another area of focus is protection against cross-modal exploits, with enhanced multimodal detection identifying prompts or perturbations hidden inside images, audio, and video files that may be used to manipulate LLM outputs. This aims to address potential vulnerabilities introduced by the use of different data modalities in AI systems.
Sumedh Thakar, President and CEO of Qualys, spoke about the increasing complexity and risk accompanying AI adoption in business, stating, "AI is reshaping how businesses operate, but with that innovation comes new and complex risks."
"TotalAI delivers the visibility, intelligence, and automation required to stay agile and secure, protecting AI workloads at every stage — from development through deployment. We are proud to lead the way with the industry's most comprehensive solution, helping businesses innovate with confidence, while staying ahead of emerging AI threats."
Qualys has stated that TotalAI is built for the realities of AI risk, offering more than just infrastructure assessments by directly testing models for a range of vulnerabilities and threats relevant to contemporary AI deployments.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Techday NZ
15 hours ago
- Techday NZ
Blackpearl opens retail offer after AUD $10.3m raise & US deal
Blackpearl Group has opened its retail entitlement offer at AUD $0.95 per share, following a AUD $10.3 million institutional raise led by Australian cornerstone investors ahead of its proposed listing on the Australian Securities Exchange as a foreign-exempt entity. The retail component of the entitlement offer allows eligible shareholders to participate following the completion of the offer's institutional stage, which has attracted backing from prominent Australian institutional investors. This development comes as the company finalises its acquisition of US-based AI sales automation firm B2B Rocket, a transaction expected to raise Blackpearl's annual recurring revenue (ARR) to USD $17.5 million and set the direction towards a USD $50 million target. Australian support The institutional element of Blackpearl's accelerated non-renounceable entitlement offer (ANREO) and additional placement successfully raised AUD $10.3 million. The support from Australian investors is crucial as Blackpearl progresses its application for an ASX foreign-exempt listing, a move intended to broaden its investor base and reinforce its presence in the world's largest market for small and medium businesses. Chief Executive Officer Nick Lissette said the offer aligned with the company's broader ambitions: Blackpearl isn't in the habit of standing still. Investor demand has been clear and with Australian cornerstone support in place and our ASX pathway progressing, we're opening the retail window for eligible shareholders today. This is a rare moment - a New Zealand AI company acquiring a cutting-edge high growth US technology business, backed by Australian institutions and preparing for an ASX quotation. The raise materially broadens our investor base and strengthens our platform to scale in the world's largest SMB market. Lissette stated that the opening of the retail offer reflects a significant step in Blackpearl's expansion strategy. The offer opened to eligible shareholders on Monday 18 August and will close on 25 August, giving participants the opportunity to subscribe at AUD $0.95 per share. Oversubscriptions will be permitted for those who fully take up their entitlement. Acquisition and growth targets Blackpearl's pending acquisition of B2B Rocket, an AI sales automation business based in the United States, is expected to close this week. The company projects that this acquisition will lift ARR to USD $17.5 million, with momentum towards USD $20 million as it maintains a long-term target of USD $50 million. Lissette added: We're not inching forward, we're leaping. With B2B Rocket closing this week, we're in striking distance of $20m and so we're now focused on our $50m target. This is the growth story NZ tech needs right now. It's proof that Kiwi innovation can scale - and compete - anywhere and signals that NZ Tech belongs in the big leagues globally and has what it takes to deliver. Next steps for listing Blackpearl targets its ASX quotation in approximately three months, contingent on the successful completion of a Tier 1 standard audit of B2B Rocket. The company sees institutional support from Australia as pivotal in this phase. Lissette stated: Australian institutional backing gives us more than capital; it gives us confidence and credibility as we scale. Use of proceeds Proceeds from the entitlement offer will be used to fund the B2B Rocket acquisition, support the scaling of Bebop's growth, integrate B2B Rocket and execute its go-to-market plan, enhance Blackpearl's Data Wholesale resources, and maintain a cash buffer for working capital purposes. Lissette summarised the company's outlook: We're not just building a bigger business, we're building a bigger playing field. This particular combination of capital, capability and opportunity doesn't come around often and we intend to use it to take New Zealand AI global. Follow us on: Share on:
Techday NZ
15 hours ago
- Techday NZ
Accenture to acquire CyberCX, strengthening Asia Pacific security
Accenture has reached an agreement to acquire CyberCX in a move that will expand its cybersecurity operations across the Asia Pacific region. CyberCX, headquartered in Melbourne, Australia, is recognised for providing cybersecurity services to both private and public sector entities throughout Australia, New Zealand, and international markets. With a workforce of approximately 1,400 professionals, the company brings expertise spanning consulting, transformation, managed security services, offensive and cyber physical security, crisis management, threat intelligence, managed detection and response, and strategic advisory, as well as identity, cloud, and network security. The acquisition of CyberCX marks the largest cybersecurity purchase in Accenture's history and aims to strengthen its position in Asia Pacific, a region facing increasingly complex regulatory and cybersecurity challenges. CyberCX operates multiple security operations centres across Australia and New Zealand and maintains additional offices in London and New York, which enables it to merge local insight with global coverage. Capabilities and technology CyberCX has introduced several AI-powered security platforms, providing services such as detection and response, a sovereign secure cloud, and the CyberCX Academy for skills development. It also employs proprietary tools for security assessment and the gathering of cyber intelligence. This focus on technology aligns with findings from Accenture's State of Cybersecurity Resilience 2025 report, which identified that 97% of Australian organisations are not fully prepared to secure their AI-driven operations, while 80% currently lack fundamental data and AI cybersecurity practices to protect models and cloud infrastructure. Paolo Dal Cin, Global Lead for Accenture Cybersecurity, commented on the shared objectives between the two companies. "CyberCX and Accenture share a mission to harness the power of cyber to help our clients securely navigate change, accelerate business reinvention and build resilience against evolving threats. By combining Accenture's agentic AI capabilities with CyberCX's strong market leadership, innovative offerings and trusted C-suite and government relationships, we will enable clients across Asia Pacific to transform cybersecurity into a strategic advantage." Industry partners and expertise CyberCX has developed partnerships with major cybersecurity players, including Microsoft, Palo Alto Networks, and CrowdStrike. The provider is regularly recognised as a top managed service and system integrator in the region. Its workforce collectively holds over 2,600 industry certifications. Peter Burns, who leads Accenture's business in Australia and New Zealand, outlined the drivers behind the transaction. "Client demand for cybersecurity services is accelerating as data and digital environments become increasingly connected and heightened threats are exposed across operational value chains, supply chains and the enterprise. The need for responsible governance is also rising as AI and Quantum technologies advance. CyberCX's breadth of capabilities, trusted relationships with government and critical infrastructure organisations, and exceptional talent in the region, combined with Accenture's local and global scale and innovation, will help us meet this ever-increasing client need." Market growth and integration John Paitaridis, CEO of CyberCX, highlighted the firm's progress and the opportunities arising from the acquisition. "We are immensely proud of the business we have built, becoming one of the leading providers of cybersecurity services in the region. Joining Accenture's global cybersecurity organisation enables our exceptional people to combine forces with global capabilities and provide world-leading cybersecurity services to an even greater number of clients across Asia Pacific as we accelerate our growth in the region. Our shared mission for helping clients stay ahead of emerging threats and build resilience makes this a force multiplier." The acquisition is the latest in a series of steps by Accenture aimed at expanding its cybersecurity portfolio. Since 2015, the company has completed 20 acquisitions in this sector, including Morphus, MNEMO Mexico, and Innotec Security. The financial terms relating to the CyberCX transaction have not been specified. The closing of the deal is subject to regulatory approvals and other customary closing conditions.
Otago Daily Times
21 hours ago
- Otago Daily Times
Eliminating jobs and living on borrowed time
As ever, we are living on borrowed time. There's the familiar old threat of global nuclear war and the growing risk of global climate catastrophe, plus not-quite-world-ending potential disasters like global pandemics and untoward astronomical events (asteroid strikes, solar flares, etc.) Lots to worry about already, if you're that way inclined. So, it's understandable that the new kid on the block, artificial intelligence, has been having some trouble making its presence felt. Yet the so-called 'godfather of Artificial Intelligence', scientist Geoffrey Hinton, who last year was awarded the Nobel Prize for his work on AI, sees a 10% to 20% chance that AI will wipe out humanity in the next three decades. We will come back to that, but let's park it for the moment because the near-term risk of an AI crash is more urgent and easier to quantify. This is a financial crash of the sort that usually accompanies an exciting new technology, not an existential crisis, but it is definitely on its way. When railways were the hot new technology in the United States in the 1850s, for example, there were five different companies building railways between New York and Chicago. They all got built in the end, but most were no longer in the hands of the original investors and a lot of people lost their shirts. We are probably in the final phase of the AI investment frenzy right now. We're a generation on from the bubble of the early 2000s, so most people have forgotten about that one and are ready to throw their money at the next. There are reportedly now more than 200 AI "unicorns" — start-ups "valued" at $1 billion or more — so the end is nigh. The bitter fact that drives even the industry leaders into this folly is the knowledge that after the great shake-out not all of them will still be standing. For the moment, therefore, it makes sense for them to invest madly in the servers, data-centres, semiconductor chips and brain-power that will define the last companies standing. The key measure of investment is capex — capital expenditure — and it's going up like a rocket even from month to month. Microsoft is forecasting about $100b in capex for AI in the next fiscal year, Amazon will spend the same, Alphabet (Google) plans $85b, and Meta predicts between $66 and $72b. Like $100m sign-on fees for senior AI researchers who are being poached from one big tech firm by another, these are symptoms of a bubble about to burst and lots of people will lose their shirts, but it's just part of the cycle. AI will still be there afterwards, and many uses will be found for it. Unfortunately, most of them will destroy jobs. The tech giants themselves are eliminating jobs even as they grow their investments. Last year 549 US tech companies shed 150,000 workers, and this year they are disappearing even faster. If that phenomenon spreads across the whole economy — and why wouldn't it? — we can get to the apocalypse without any need for help from Skynet and the Terminator. People talk loosely about "Artificial General Intelligence" (AGI) as the Holy Grail, because it would be as nimble and versatile as human intelligence, just smarter — but as tech analyst Benedict Evans says, "We don't really have a theoretical model of why [current AI models] work so well, and what would have to happen for them to get to AGI. "It's like saying 'we're building the Apollo programme but we don't actually know how gravity works or how far away the Moon is, or how a rocket works, but if we keep on making the rocket bigger maybe we'll get there'." So the whole scenario of a super-intelligent computer becoming self-aware and taking over the planet remains far-fetched. Nevertheless, old-fashioned 2022-style generative AI will continue to improve, even if Large Language Models are really just machines that produce human-like text by estimating the likelihood that a particular word will appear next, given the text that has come before. Aaron Rosenberg, former head of strategy at Google's AI unit Deep Mind, reckons that no miraculous leaps of innovation are needed. "If you define AGI more narrowly as at least 80th-percentile human-level performance [better than four out of five people] in 80% of economically relevant digital tasks, then I think that's within reach in the next five years." That would enable us to eliminate at least half of the indoor jobs by 2030, but if the change comes that fast it will empower extremists of all sorts and create pre-revolutionary situations almost everywhere. That's a bit more complicated than the Skynet scenario for global nuclear war, but it's also a lot more plausible. Slow down. — Gwynne Dyer is an independent London journalist.
