Qualys has announced the availability of AI-Powered Patch Reliability Scoring — a new capability within TruRisk Eliminate that enables organisations to predict patch impact before deployment and improve risk-based patching decisions.
“Patch rollbacks aren’t just inconvenient — they’re disruptive. They burn time, trigger outages, and create security gaps while teams scramble to stabilise production. And as patch volumes and critical vulnerabilities keep rising, the old approach of “deploy and hope” or “test everything forever”, doesn’t scale,” explained Eran Livne, Sr Director of Product Management, Qualys. “Patch Reliability Score uses artificial intelligence to analyse large-scale real-world feedback signals to forecast the likelihood that a patch will create issues in customer environments.”
The new feature continuously aggregates and evaluates data from a broad set of public sources to generate simple, actionable scores throughout a patch’s lifecycle. A high reliability score gives teams confidence to deploy more rapidly, while a low reliability score signals the need for further testing, staging, or mitigation planning.
Based on anonymised Qualys telemetry from 2025, some of the most frequently rolled-back patches, or patches that had to be undone after deployment, included advisory USN-7545-1 and Windows updates KB5065426, KB5063878, KB5055523, and KB5066835. When Qualys Research analysed these patches against the new scoring capability, it was shown that the AI scored these patches as “Low Reliability” — matching what was ultimately experienced.
In addition to scoring reliability, organisations can pair the insights with Qualys-curated mitigation techniques, enabling risk reduction while patches are thoroughly tested or staged for safe deployment.
Key customers benefits include the ability to:
- Anticipate patch instability before outages occur
- Prioritise testing efforts where needed most
- Accelerate deployment when confidence is high
- Deploy mitigations to maintain security during testing
“Patch management isn’t just about speed anymore — it is about predictability. With the release of this AI-powered Patch Reliability Score capability, customers can expect less guessing, fewer rollbacks and better security outcomes,” added Livne.
The AI-Powered Patch Reliability Scoring capability is now included for all Qualys TruRisk Eliminate customers. Organisations not currently using TruRisk Eliminate can sign up for a free trial here: https://www.qualys.com/free-trial-new/trurisk-eliminate
Discussion about this post