Qualys says the engine draws on its own track record deploying half a billion patches with a rollback rate below 0.1%, 40% of them pushed out autonomously without human sign-off. The company is positioning that history as the evidence base for letting the new system take on more remediation work without direct oversight.

The release adds two features inside TruConfidence: a Patch Reliability Score that uses AI to rate how likely a given patch is to cause problems before it's deployed, and a tool called Agent Sara that handles remediation in waves rather than pushing changes to every system at once.

Qualys CEO Sumedh Thakar said organizations want to automate patching and remediation but hold back because they fear automation will cause outages. TruConfidence is built to address that fear directly: it monitors system health during remediation through partners including Dynatrace, watching for warning signs such as CPU spikes or memory issues, and uses AI-driven failure analysis to guide a rollback if something goes wrong.

The product covers hybrid attack surfaces, including perimeter devices, cloud environments and applications, and is designed to check for existing security controls already covering a given risk so it doesn't apply duplicate remediation.