Qualys, Inc. (NASDAQ: QLYS) announced new capabilities in its TotalAI product on July 29, built on the Qualys Enterprise TruRisk Platform, aimed at helping organizations discover, test, monitor, and govern enterprise AI risk from development through production.

The updated TotalAI offering includes tools to detect shadow AI, cloud AI services, AI agents, and Model Context Protocol (MCP) servers across an enterprise. The product also provides kernel-level instrumentation to monitor what AI workloads execute on servers, and adversarial testing for large language models and MCP servers, covering prompt injection, jailbreaks, and tool poisoning, mapped to the OWASP LLM and MCP Top 10 and the EU AI Act.

TotalAI assigns risk scores using the same TruRisk scoring system Qualys applies to vulnerabilities, cloud environments, and containers. The company says the platform is designed to help security, engineering, and compliance teams generate audit-ready evidence of AI controls for regulators and boards.

"With every modern enterprise leveraging AI, the question is changing from 'Is my AI secure?' to 'Can I prove it to my board and regulators?'" said Sumedh Thakar, president and CEO of Qualys.

Grace Trinidad, Research Director at IDC, said in the press release that organizations folding AI risk into continuous exposure management "will be the organizations positioned to adopt AI securely and at scale."

TotalAI is generally available. Qualys said it will also demonstrate the product at Black Hat USA 2026, booth #2333.