Tech News
Qualys launches AI-powered Web Application Scanning (WAS) with API security
Qualys has announced the launch of its API security platform that leverages AI-powered scanning and deep learning-based web malware detection to secure web apps and APIs across the entire attack surface, including on-premises web servers, databases, hybrid, multi-cloud environments, API gateways, containerized architectures, and microservices.
APIs are integral to digital transformation initiatives across industries. The latest data indicates that over 83% of web traffic now comprises API traffic, highlighting their critical role in modern web applications using microservices, cloud, and hybrid environments. However, this also underscores the vulnerabilities that accompany their widespread adoption.
“Many organizations use a variety of security tools, such as SAST, DAST, SCA, or point solutions for API security that often operate in isolation, without a unified platform to integrate their findings. Moreover, the absence of integration between these tools leads to a fragmented view of the application security posture and results in uncoordinated efforts and gaps in security coverage. Similarly, SAST & DAST tools offer limited coverage for API-specific issues and focus predominantly on code vulnerabilities,” commented Kunal Modasiya, Vice President, Product Management, CyberSecurity Asset Management, Qualys. “Mainly, these solutions fail to extend their assessment to the runtime or environmental threats where APIs operate and provide visibility into the vulnerabilities of the underlying infrastructure hosting these APIs, leaving significant security gaps at the network and host levels.”
Qualys API security addresses and allows organizations to:
- Measure API risks across all attack surfaces with a unified view of API security by discovering & monitoring every API asset across diverse environments, enabling better decision-making and faster response times.
- Communicate API risks like OWASP API Top 10 vulnerabilities & drift from OpenAPI specs with real-time threat detection and response, minimizing the risk window and enhancing overall security.
- Eliminate API risks with integrated workflows supporting Shift-Left & Shift-Right practices, bridging the gap between IT and security teams, promoting seamless collaboration, and improving operational efficiency.
Key features of Qualys API
1. Comprehensive API discovery and inventory management
Qualys WAS with API Security automatically identifies and catalogs all APIs within an organization’s network, including internal, external, undocumented, rogue, and shadow APIs. Whether APIs are deployed in multi-cloud environments (AWS, Azure), containerized architectures (Kubernetes), or API gateways (Apigee, Mulesoft), Qualys’ continuous discovery ensures an updated inventory across all platforms, preventing unauthorized access points and shadow APIs.
2. API vulnerability testing & AI-powered scanning
Qualys provides comprehensive API vulnerability testing using 200+ prebuilt signatures to detect API-specific security vulnerabilities, including those listed in the OWASP API Top 10, such as rate limiting, authentication & authorization issues, PII collection, and sensitive data exposure. Moreover, for large applications, Qualys combines the power of deep learning and AI-assisted clustering to perform efficient vulnerability scans. This smart clustering mechanism targets critical areas, achieving a 96% detection rate with an 80% reduction in scan time.
3. API compliance monitoring
Qualys performs both active and passive compliance monitoring to identify and address any drift or inconsistencies in API implementation and documentation in adherence to the OpenAPI Specification (OAS v3). Clear, standardized API documentation, in adherence to OAS, ensures that shared documentation is easily understood by recipients, simplifies security assessments and enforcement, and enhances the accuracy of code, benefiting both automated tools and human developers. Qualys also continuously monitors APIs for compliance with industry standards such as PCI-DSS, GDPR, and HIPAA to ensure that APIs remain compliant with evolving regulations, avoiding potential fines and enhancing data protection.
4. API risk prioritization with TruRisk
Qualys leverages its proprietary TruRisk scoring system, which integrates multiple factors such as severity, exploitability, business context, and asset criticality to prioritize risks based on overall business impact, ensuring that the most critical vulnerabilities are addressed first. It also categorizes risks based on the OWASP API Top 10, helping organizations focus on the most prevalent and severe API security threats.
5. Seamless integration with Shift-Left and Shift-Right workflows
Qualys integrates seamlessly with existing CI/CD tools (e.g., Bamboo, TeamCity, Github, Jenkins, Azure DevOps) and IT ticketing systems (e.g., Jira, ServiceNow), supporting both shift-left and shift-right security practices. This facilitates automated security testing and real-time threat detection and response without disrupting development workflows. By bridging the gaps between IT and security teams, Qualys ensures smoother operational transitions, improving API security practices and reducing the risk window.
Tech News
Thermax showcases advanced desalination and water recovery technologies to strengthen UAE’s industrial water security at WETEX 2026
Thermax Limited showcased its advanced seawater desalination and industrial water recovery technologies at the Water, Energy, Technology and Environment Exhibition 2026 (WETEX), held from October 20 to 22 at Dubai World Trade Centre. Through its digital showcase, the company highlighted solutions designed to help industries secure reliable water supplies, improve resource efficiency and reduce environmental impact.
Thermax’s participation came as Dubai continues to strengthen its desalination infrastructure to meet growing water requirements. According to Dubai Electricity and Water Authority (DEWA) Financial Annual Report, desalinated water production increased by 5.51 per cent year-on-year in the first quarter of 2026, reaching a record 37.57 billion imperial gallons. By June 2026, Dubai’s installed desalination capacity had reached 555 million imperial gallons per day, with seawater reverse osmosis accounting for 23 per cent of the total. These developments highlight the growing importance of efficient and reliable water infrastructure in supporting the UAE’s evolving water requirements.
At the event, Thermax highlighted its desalination solutions that help industries meet their water needs while easing pressure on freshwater resources. The systems use energy-efficient membrane technology to remove salts from seawater and produce water suitable for industrial use, with designs tailored to each customer’s water quality and operating requirements.
Through its digital showcase, Thermax also highlighted portable and containerised desalination systems that bring key equipment together in compact units. This reduces installation work on site, supports faster deployment and allows treatment capacity to grow with demand.
Ashish Bhandari, Managing Director & CEO, Thermax Limited, said: “Water security shapes where industries invest and how competitively they operate. Businesses need dependable supply at a cost they can sustain. That means planning water and energy together, with investment decisions guided by performance throughout a plant’s life.”
Beyond desalination, Thermax also showcased Advanced Reverse Osmosis (RO) technology that recovers additional usable water from the concentrated stream left after treatment. By concentrating the remaining brine, the technology reduces the load on downstream evaporation systems and supports more efficient industrial wastewater management. When combined with suitable additional treatment and crystallisation processes, it can also support salt recovery, creating opportunities to recover valuable resources from wastewater and promote circular water management.
Thermax also showcased industrial water treatment, wastewater recycling and zero liquid discharge (ZLD) solutions that help industries treat and reuse wastewater for suitable applications while reducing freshwater dependence. Complementing these solutions, Thermax’s EDGE Live digital platform supports plant performance through real-time monitoring, AI-driven analytics and predictive diagnostics, helping industrial operators identify potential issues early, optimise maintenance and improve operational reliability.
These solutions align with the objectives of the UAE Water Security Strategy 2036, which targets 95 per cent reuse of treated water by 2036. Through its regional office in Dubai, Thermax is focused on exploring various opportunities across the UAE’s industrial desalination, water treatment and wastewater recycling sectors, particularly within water-intensive industries such as oil and gas, chemicals, metals, food and beverages, and pharmaceuticals.
Thermax has been active across the Middle East and North Africa region since 1993, with more than 1,000 installations across its regional energy and environment portfolio, serving over 30 industries.
Tech Features
TrendAI™Expands Vision One with New Security Capabilities for AI Agents and Application Development
TrendAI™, the global AI security leader and enterprise business unit of Trend Micro Incorporated (TYO: 4704; TSE: 4704), has announced new capabilities for TrendAI Vision One™. These include the private preview of Autonomous Vulnerability Discovery and expanded support for Claude’s Compliance API, which now covers Claude Code and Cowork sessions. Together, these services help enterprises identify exploitable vulnerabilities in source code before attackers do, investigate how AI agents operate, and maintain oversight as AI adoption scales.
The need for this oversight is growing rapidly across the region. According to research conducted by The Harris Poll for Dataiku, 62% of UAE chief information officers believe their organisation have more than 50 AI agents running in production, yet only 18% have a fully unified view of agents across platforms, data environments, and business applications. At the same time, AI is accelerating both how quickly code is written and how quickly attackers can identify flaws. Security teams therefore need to keep pace with AI adoption without losing visibility into what is happening across their environments.
The new capabilities extend TrendAI Vision One™ across both software development and AI agent activity. TrendAI Vision One™ Autonomous Vulnerability Discovery is powered by AESIR, TrendAI’s agentic exploit-remediation engine, which identifies and validates vulnerabilities, including zero-days. It also verifies fixes in customer source code. The engine uses purpose-built, multi-model AI architecture that relies primarily on Anthropic models and has outperformed single-model and agentic system scores on the CyberGym Leaderboard. Every finding is validated by experts from the TrendAI™ Zero-Day Initiative™ (ZDI), the world’s largest vendor-agnostic bug bounty programme. The Autonomous Vulnerability Discovery is deployed and operated on Amazon Bedrock from Amazon Web Services (AWS), enabling the full workflow to run within the customer’s AWS environment
In parallel, the expanded Claude Compliance API integration brings Claude Code and Cowork session records from Claude Enterprise into TrendAI Vision One™. These records include prompts, responses, and tool calls, each tied to a verified user. It enables security teams to investigate AI activity in context, correlate it with endpoint, identity, cloud and network signals, and build custom detections for relevant agent behaviour.
Commenting on the announcement, Salah Suleiman, Managing Director, South Gulf, TrendAI™, said, “AI is changing both how software is built and how work gets done across the enterprise. Code is being written faster than ever, while AI agents are increasingly able to access systems, call tools and act on behalf of users. As organisations across the UAE and the wider region scale AI at pace, their security teams need to identify vulnerabilities early while maintaining clear visibility into what AI systems are doing and whether their actions align with organisational policies. With these additions to TrendAI Vision One™, we are helping organisations move faster with AI while maintaining the context, oversight and control needed to do so securely.”
TrendAI Vision One™ also continues to ingest activity logs from Claude Enterprise, covering user logins, administrative actions and configuration changes, as well as from Claude Platform, covering administrative, system and resource events. Autonomous Vulnerability Discovery is now available in private preview to select enterprise customers running on AWS, while Claude’s Compliance API integration in TrendAI Vision One™ is available to TrendAI Vision One™ customers using Claude Enterprise.
Tech News
ZWSOFT and Logicom Saudi Arabia Partner to Expand Access to Professional CAD Solutions in the Kingdom
The Strategic distribution partnership aims to accelerate digital transformation across Saudi Arabia’s architecture, engineering and construction sector
ZWSOFT, a global provider of engineering design software, has appointed Logicom Saudi Arabia as their distributor in the Kingdom, strengthening access to professional computer-aided design (CAD) solutions for local businesses.
The partnership combines ZWSOFT’s engineering software expertise with Logicom’s established distribution capabilities and local partner network to support Saudi Arabia’s architecture, engineering and construction (AEC) sector. The collaboration aims to help businesses improve productivity and modernise workflows through accessible, high-performance and cost-efficient design technologies.
At the heart of the offering is ZWCAD, ZWSOFT’s flagship CAD solution, featuring DWG compatibility, a familiar design environment and cost-efficient licensing. The partnership will help resellers, system integrators and end customers access these solutions and address evolving project requirements, supporting the Kingdom’s wider digital transformation ambitions under Vision 2030.

Naim AlHammami, Country Manager, ZWSOFT Saudi Arabia, said: “With the surging demand for advanced tech solutions in Saudi Arabia, ZWSOFT set out to find a proven, high-caliber distribution partner. Logicom Saudi Arabia is uniquely qualified to drive this expansion, backed by a strong product ecosystem and an established track record in enterprise hardware and software distribution.”
Fadi Karzon, General Manager of Logicom Saudi Arabia, said: “We are pleased to partner with ZWSOFT to bring innovative and cost-effective CAD solutions closer to businesses across Saudi Arabia. By combining ZWSOFT’s technology with Logicom’s local market expertise and strong partner ecosystem, we aim to empower our partners and customers with the tools they need to enhance productivity, drive innovation and support the Kingdom’s digital transformation goals.”
Through this partnership, ZWSOFT and Logicom aim to expand the availability of professional design software across Saudi Arabia and strengthen support for the country’s growing engineering and construction industries.
-
Trending12 months agoOPPO A6 Pro 5G Review: Reliable Daily Driver
-
Tech News2 years agoDenodo Bolsters Executive Team by Hiring Christophe Culine as its Chief Revenue Officer
-
VAR2 years agoMicrosoft Launches New Surface Copilot+ PCs for Business
-
Automotive2 years agoAGMC Launches the RIDDARA RD6 High Performance Fully Electric 4×4 Pickup
-
Tech Interviews3 years ago
Navigating the Cybersecurity Landscape in Hybrid Work Environments
-
Hospitality2 years agoGulfood 2025 30th Edition Kicks Off Today, Setting New Benchmarks in F&B Growth and Innovation
-
VAR11 months agoHuawei Nova 14 Pro Review: Where Camera Excellence Meets Ecosystem Evolution
-
Tech News1 year agoNothing Launches flagship Nothing Phone (3) and Headphone (1) in theme with the Iconic Museum of the Future in Dubai


