Mobile devices now make up more than 60 percent of enterprise endpoints, reflecting how hybrid work has transformed the way employees connect to corporate systems and data.
Yet despite their growing role in the enterprise, mobile devices remain largely disconnected from traditional security and risk management practices. Servers and desktops undergo continuous vulnerability assessments, while mobile devices generally do not. The result is a significant blind spot: more than half of the enterprise endpoint landscape falls outside routine vulnerability management. You can't accurately assess your security posture if you ignore such a large part of it.
This isn’t a tooling oversight. Traditional vulnerability scanners were built for servers and desktops. They were never designed to inspect mobile apps, which are assembled from third-party SDKs, open-source libraries, and APIs. A vulnerability buried in one of those components is invisible to them, even in an app you trust.
Today we’re announcing an integration between Lookout Mobile AI Security and Qualys Enterprise TruRisk Management (ETM).
Mobile exposure is bigger than most teams assume
Mobile is a front door to corporate data. Frontier AI is also helping attackers find and exploit mobile vulnerabilities faster and at greater scale than before.
Exposure management programs can’t validate what they can’t see. When mobile apps and endpoint risk fall outside the assessment, CTEM has a blind spot. We close that blind spot by pairing Lookout’s mobile software supply chain analysis, including the Mobile Software Exposure Center (MSEC), with broader enterprise threat telemetry. Mobile is then assessed, validated, and prioritized like everything else.
By integrating Lookout MSEC intelligence with Qualys TruRisk scoring, security teams gain a unified view of mobile and enterprise exposure. Risk decisions now incorporate mobile OS, application, and SDK patch levels, known exploited vulnerabilities (KEVs), software supply chain risks embedded in applications, and active threats.
What it does
Lookout Mobile AI Security and Qualys ETM bring mobile into enterprise risk management:
- Extends CTEM to mobile. Security teams get a single, consistent framework for assessing and prioritizing exposure across the entire enterprise, including mobile devices and apps.
- Prioritizes mobile risk. Lookout intelligence on OS patch levels, known vulnerabilities, active exploitation, and risk for embedded SDKs and open-source dependencies flows into Qualys ETM. Teams can fix what matters most to the business first.
- Turns intelligence into action. Mobile threat and software exposure findings connect directly to remediation workflows, enabling teams to move from detection to risk reduction faster.
- Improves asset visibility and compliance. Mobile device metadata flows continuously into Qualys ETM, broadening asset inventory coverage and supporting compliance reporting.
Measurable risk reduction
An enterprise risk assessment that excludes mobile is incomplete. Working with Qualys, we’re bringing mobile threat intelligence and software exposure data into Qualys ETM so organizations can see their cyber risk across on-premises, cloud, and mobile in one place. Teams can then prioritize by business impact and measure exposure reduction across the entire enterprise, not just the parts that are easy to scan.
The core integration between Lookout Mobile AI Security and Qualys ETM is now generally available. It’s cloud-to-cloud, so there’s no on-premises infrastructure or additional software. Joint customers can enable it at no additional cost by configuring secure API connectors in their existing Lookout and Qualys consoles.
Book a Demo
Discover how adversaries use non-traditional methods for phishing on iOS/Android, see real-world examples of threats, and learn how an integrated security platform safeguards your organization.
