XcellSecure|All Qualys Products
The current Qualys line-up — 87 entries across 11 categories — from VMDR and TruRisk Eliminate to Policy Audit, PCI ASV scanning, TotalCloud, TotalAppSec, TotalAI and the Risk Operations Center with Agentic AI. Renamed and consolidated products show their former names. Qualys is quoted by XcellHost; our own services are priced in INR with GST.
All 87 Qualys products. One page.
Platform and ROC, vulnerability management and remediation, assets, compliance, EDR, TotalCloud, application and AI security, sensors, free tools, subscriptions and XcellHost's own services — 87 entries across 11 categories. Tap a group to see what is in it.
Try a shorter word — search also finds former names such as Patch Management, Mitigation, Isolation or Container Security.
Sources, read on 4 Nov 2026: qualys.com/enterprise-trurisk-platform (Platform Apps menu, use cases and segments), qualys.com/documentation (every documented app, sensor and utility), the qualys.com/apps pages for Policy Audit, TotalAppSec, TruConfirm, ETM Identity, Threat Protection, Global AssetView, CDR, SSPM and TotalAI, docs.qualys.com — TruRisk Eliminate release 4.1 notes (6 Sep 2026: Patch, Mitigate and Isolate unified) and the ETM glossary — the Qualys newsroom on Agentic AI (4 Aug 2025), browsercheck.qualys.com and notifications.qualys.com. The Context XDR URL now opens the platform page, so it is left out, as are the retired Qualys WAF (2023) and Indication of Compromise (2024). Descriptions are XcellHost's summaries. Qualys resale is on quote. ₹ prices are XcellHost services from the linked pages — indicative, excl. 18% GST.
Where most Qualys estates start, and who runs them.
Tiles with an XcellHost page link straight to it; the rest open the entry in the catalogue above.
Deploy, scan, fix and prove it — one team in Mumbai.
Our fees come from our Security Operations, PCI DSS, Cloud Security Assessment, Cryptographic Posture Management and Red Team pages. They are indicative and exclude 18% GST. Qualys subscriptions are quoted separately.
Qualys apps sized to your assets, plus XcellHost services, quoted together — Qualys publishes no list prices, so resale is always on quote.
Cloud Agent roll-out, scanner and Gateway placement, scan authentication — SOC onboarding and transition one-time*.
Security Operations Essential per endpoint a month* with a monthly vulnerability scan; Professional * also tracks remediation.
PCI ASV scan management a quarter*; Managed GRC from a month* turns Policy Audit reports into evidence.
Cloud security assessment per account*; cryptographic posture discovery * next to Certificate View.
Breach and attack simulation readiness *; an objective-based red team * checks whether anyone notices.
* Indicative · excl. 18% GST · copied from the linked XcellHost pages. Confirm with the XcellHost price list. Authorised Qualys partner* — partner status to be confirmed by XcellHost.
Free tools, a subscription or run by us — we help you choose.
Most Indian estates start with a free tool or a trial, move to a subscription sized to their assets, and add a managed service on top.
| Option | Qualys subscription | Free tools | Run by XcellHost |
|---|---|---|---|
| What it is | Apps on the Enterprise TruRisk Platform, sized by assets, apps or users — packaged for small, mid-sized, enterprise and public-sector buyers | SSL Labs, BrowserCheck, Global AssetView, ThreatPROTECT and Qualys training | XcellHost deploys the sensors, runs scans and remediation, and files the evidence — or adds SOC, GRC and testing services |
| Good for | Teams with their own security staff | A first look at TLS settings or the asset inventory | Teams without in-house vulnerability or SOC staff |
| Price shown | Qualys publishes no list prices — on quote | No charge, per Qualys | Qualys on quote · SOC from /endpoint/mo* · ASV scans /qtr* |
Segment packages as listed on qualys.com, read 4 Nov 2026. XcellHost resale of Qualys is price on quote. * Indicative · excl. 18% GST, from the linked XcellHost pages.
Build your Qualys stack, or let us suggest one.
Tap + Stack on any entry in the catalogue, or pick a goal below to see where we would start. Send the list and we reply with a design and a quotation.
What do you need to do?
My stack 0
Nothing yet — tap + Stack on any entry, or pick a goal.
Qualys, plus the services we run around it.
Services XcellHost runs alongside Qualys and has its own pages for. Status shown with * is to be confirmed by XcellHost — not a claim of any partner tier.
Letter tiles are placeholders until official logo files are supplied. Vendor names are trademarks of their owners. * Authorised Qualys partner status to be confirmed by XcellHost.
Qualys certifications, plus XcellHost's own.
Two different things: what Qualys attests for its own cloud platform, and what XcellHost holds as the team running your estate. Each Qualys item links to where we read it.
Qualys's own trust pages could not be read from our tools, so each badge is taken from the source it links to; ask us for Qualys's current reports before you rely on them. Scope varies by Qualys platform region and app. For the DPDP Act, CERT-In directions and RBI or SEBI audits, Qualys gives you scan, configuration and patch evidence; compliance stays your organisation's responsibility.
Buying Qualys in India, answered.
87 entries across 11 categories — 74 Qualys apps, modules, sensors, free tools and subscription packages, plus 13 XcellHost services that run alongside them — read from qualys.com and Qualys's documentation on 4 November 2026.
Qualys's TruRisk Eliminate release 4.1, dated 6 September 2026, unified Patch, Mitigate and Isolate under TruRisk Eliminate, and the app picker now shows only TruRisk Eliminate. Patch Management users get an upgrade path. The rows show the former names, and search finds them.
Qualys's app menu now shows Policy Audit, while its documentation still lists Policy Compliance and Security Configuration Assessment separately. We list all three and confirm which licence fits your audit scope before quoting.
Qualys Agentic AI with a marketplace of Cyber Risk AI Agents, the Cyber Risk Assistant and a no-code agent builder (announced 4 August 2025); TruConfirm, which proves exploitability with Agent Val; ETM Identity; and TruRisk Eliminate as one remediation app (September 2026).
Context XDR — its qualys.com page now opens the platform page — the Qualys Web Application Firewall, shut down in 2023, and Indication of Compromise, end of life in 2024. We found no current page for TruRisk Insights or TotalCloud AI, so they are not listed. Documentation-only sections are not products.
Qualys runs several regional platforms, and which one your subscription sits on is set when you buy. We confirm the platform region with Qualys before you sign, so scan data stays where your DPDP Act and regulator obligations need it.
Qualys publishes no list prices, so every Qualys app is on quote, sized by assets, web apps or users. Our own services are fixed: Security Operations from ₹199 per endpoint a month, PCI ASV scan management ₹24,999 a quarter, cloud security assessment ₹49,999 per account and Managed GRC from ₹49,999 a month — indicative, excluding 18% GST.
No. VMDR and WAS find known vulnerabilities and misconfigurations automatically. A VAPT or red team adds people who chain weaknesses to see how far an attacker could get. Regulated entities usually need both — we pair Qualys with breach and attack simulation and red team exercises.
Yes. We deploy the Cloud Agent and scanners, tune scans, triage findings in our Mumbai SOC, drive patching through TruRisk Eliminate and file PCI and audit evidence. Rows with “Managed by XcellHost” link to the page for that service.
It adds the product to your cart as a quotation line with no price, because Qualys pricing depends on asset count, apps and term. Use the stack builder to send a full list — we reply with a design and a quotation.
No. Icons, vendor tiles and certification badges are text placeholders until official files are supplied. Qualys's own pages, linked from each row, are the authority on what Qualys offers and holds.
Qualys, VMDR, TruRisk, TotalCloud, TotalAppSec, TotalAI and related names are trademarks of Qualys, Inc. Product list sourced from qualys.com and docs.qualys.com on 4 November 2026.