Automate Asset Isolation: Your Last Resort to Meet Remediation Deadlines

Executive Summary

Remediation deadlines slip for reasons outside your control: a patch does not exist yet, a patch is delayed, or a remediation attempt fails. The outcome is the same either way: the host stays unpatched and stays on the network. TruRisk Eliminate closes that window by isolating the host automatically the moment your deadline passes, executed natively through the Qualys Cloud Agent with no EDR integration required. This post covers the trigger criteria, the QQL query behind a CISA KEV use case, and the audit record that isolation produces.

The Exposure Window Nobody Plans For

When a vulnerability deadline is set, the clock starts. But deadlines slip for different reasons: a patch doesn’t exist yet, a patch is delayed, or a remediation attempt fails outright. Whatever the cause, the outcome is the same: the host stays unpatched and stays on the network.

Asset isolation quarantines the host from the network the moment a defined policy is met, so it cannot be reached or exploited while remediation continues.

TruRisk Eliminate is the Remediation Intelligence platform that reasons about vulnerability risk in real time and takes autonomous action to close risk windows instantly. When a remediation deadline passes with the vulnerability still open, Eliminate triggers host isolation, automatically quarantining the host the moment your deadline passes, without manual intervention. Isolation becomes your last resort, executed instantly when remediation pathways fail.

The Remediation Reality

When a patch is months away and a deadline is days away, isolation is your last resort remediation strategy. Traditionally, that meant EDR tools, extra licensing, and a coordination cycle measured in days.

Eliminate executes host isolation natively through the Qualys Cloud Agent, using the criteria you define. The deadline passes, the host is quarantined, and your team keeps working the patch.

Why Automate Isolation?

Speed closes the exposure window