While working in a small fast growing product based startup serving in OT and IT and an emerging towards getting certified for ISO and SOC II we believe Qualys will help us a lot in future also, meanwhile till now it has helped us way too much better than any other. As it was deployed on Cloud which mapped the assests over the whole infra with the PLC's and Cloud Infra with Docker Containers and also the automated scan for the web app vuln test was also satisfied as we already minimized the most known vulnerabilty on manual hunt and was left by API Headers as while being on automation audit scans it makes relevently look low on secure dev so we fixed it with the bussiness logics too. Asset discovery and its Benchmark proved really effective for patching.

Even after deploying latest available vulnerability patches Windows machine still shows old affected CVE's as pending for remediation.