We speak with Qualys Managing Director for ANZ, Sam Salehi in the lead up to their Customer and Channel Partner event in Sydney on 28 May, 2026.
With what will be a focus for customers and partners, we discuss how attackers are now exploiting vulnerabilities before they are publicly disclosed – effectively driving ‘time-to-exploit’ to minus one day – and discuss why traditional remediation measures can create false confidence.
We also unpack why a metric like AWE is better suited, what CISOs need to do to close the gap between detection and action, and share recent insights on the push for autonomous remediation by the Qualys TRU team.
Key findings from The Broken Physics of Remediation report include:
- Insight 1: Vulnerability volumes exponentially outpace manual capacity
- Insight 2: Exploitation now precedes disclosure
- Insight 3: Manual remediation is too slow
- Insight 4: MTTR hides the true exposure window
- Insight 5: Zero-Day weaponisation dominates critical threats
- Insight 6: Less than 1% actually matters
Register interest in joining the event here – https://www.qualys.com/2026/cxo-sydney
To read the full report, you can download it here or scan the QR code in the interview – https://www.qualys.com/forms/whitepap…


