Strategic integration brings mobile endpoint and application software exposure into holistic view of enterprise cyber risk
Lookout, the pioneer and leader in AI security for the mobile workforce, announced an integration with Qualys, Inc., a leading cloud-native cyber risk management company. The integration connects Lookout Mobile AI Security with Qualys Enterprise TruRisk Management (ETM), bringing mobile endpoint risk and application software exposure into enterprise-wide cyber risk management. Together, the platforms are designed to extend the principles of the Gartner®1 Continuous Threat Exposure Management (CTEM) framework to mobile environments, enabling organizations to prioritize and reduce mobile exposure alongside broader enterprise risk.
Also Read: CIO Influence Interview with Juraci Paixão Kröhling, CEO at OllyGarden
With the rise of hybrid work and mobile access to corporate data, employee mobile devices now account for more than 60 percent of enterprise endpoints. Yet mobile security has traditionally operated separately from Risk Operations teams, creating a significant blind spot in enterprise-wide risk visibility and management.
While corporate servers and desktop workloads undergo continuous vulnerability assessments, more than half of the enterprise digital attack surface remains outside the risk analysis required to assess the overall security posture. Mobile applications rely on complex supply chains—including third-party SDKs, open-source libraries, and APIs—that traditional infrastructure vulnerability scanners were never designed to evaluate. These gaps leave organizations exposed to vulnerabilities hidden within trusted mobile applications.
By integrating intelligence from Lookout’s Mobile Software Exposure Center (MSEC) into Qualys TruRisk scoring, organizations gain a unified view of mobile and broader enterprise exposure, enabling them to prioritize remediation based on risk. Mobile Operating System, app, and SDK patch levels, known exploited vulnerabilities (KEVs), embedded application software supply chain risks, and other active threats become actionable inputs for enterprise-wide risk decisions.
Extending CTEM Across Mobile Assets
The integration helps security leaders assess mobile exposure in a business context and extend a unified CTEM strategy across the enterprise.
Key business benefits of the joint solution include:
- Extends CTEM to Mobile: Closes a critical visibility gap by extending CTEM to mobile devices and their applications, providing security teams with a consistent framework for assessing and prioritizing exposure across the enterprise.
- Prioritizes Mobile Risk: Integrates Lookout software exposure intelligence on mobile OS patch levels, known vulnerabilities, and active exploitation, as well as risks in embedded SDKs and open-source dependencies into Qualys ETM, enabling teams to prioritize mobile remediation by business impact.
- Turns Mobile Intelligence into Action: Connects mobile threat and software exposure findings to remediation workflows, helping teams move faster from detection to risk reduction.
- Improves Asset Visibility and Compliance: Continuously feeds mobile device metadata into Qualys ETM, expanding enterprise asset inventory coverage and supporting compliance assessments and reporting.
Catch more CIO Insights: Where Offensive Validation Is Headed
[To share your insights with us, please write to psen@itechseries.com ]
