Qualys, Inc. (NASDAQ: QLYS) announced the launch of InstaScan, a new capability within its Enterprise TruRisk Management (ETM) platform that the company says can detect vulnerabilities within minutes of advisory publication.

InstaScan is powered by Agent Insta, an AI-based cyber risk agent that monitors newly published vendor security advisories and correlates emerging vulnerabilities with an organization's live asset inventory and threat telemetry. Qualys said the tool covers 90% of detections within minutes across its initial set of supported technologies.

The company describes the approach as "scanless scanning," meaning detections are triggered by new advisories and asset changes rather than fixed scan schedules. The feature is now available within Qualys ETM.

The announcement references data from Verizon's 2026 Data Breach Investigations Report, which named vulnerability exploitation the leading breach entry point, accounting for 31% of breaches. Qualys also cited its own research showing that median detection-to-closure for Known Exploited Vulnerability-linked instances held at nine days, even as the related workload grew 78% year over year.

"The speed of vulnerability exploitation has fundamentally changed," said Sumedh Thakar, president and CEO of Qualys. "A slow vulnerability management program is now the biggest vulnerability an organization has."

Theresa Lanowitz, principal cybersecurity analyst at Omdia, said in a statement that "InstaScan moves threat intelligence from telling you what already happened to detect exposure the moment it emerges."

Qualys said InstaScan serves as an intelligence layer that feeds confidence-scored detections into downstream prioritization, validation, and remediation workflows within the ETM platform. The company plans to demonstrate the product at Black Hat USA.