Lookout accelerates mobile attack surface defense against ai-driven threats with Qualys Enterprise TruRisk Management. BOSTON - November 9, 2026 - Lookout, the pioneer and leader in AI security for the mobile workforce, today announced an integration with Qualys, Inc. (NASDAQ: QLYS), a leading cloud-native cyber risk management company. The integration connects Lookout Mobile AI Security with Qualys Enterprise TruRisk Management (ETM), bringing mobile endpoint risk and application software exposure into enterprise-wide cyber risk management. Together, the platforms are designed to extend the principles of the Gartner(R)[1] Continuous Threat Exposure Management (CTEM) framework to mobile environments, enabling organizations to prioritize and reduce mobile exposure alongside broader enterprise risk. With the rise of hybrid work and mobile access to corporate data, employee mobile devices now account for more than 60 percent of enterprise endpoints. Yet mobile security has traditionally operated separately from Risk Operations teams, creating a significant blind spot in enterprise-wide risk visibility and management. While corporate servers and desktop workloads undergo continuous vulnerability assessments, more than half of the enterprise digital attack surface remains outside the risk analysis required to assess the overall security posture. Mobile applications rely on complex supply chains - including third-party SDKs, open-source libraries, and APIs - that traditional infrastructure vulnerability scanners were never designed to evaluate. These gaps leave organizations exposed to vulnerabilities hidden within trusted mobile applications. By integrating intelligence from Lookout's Mobile Software Exposure Center (MSEC) into Qualys TruRisk scoring, organizations gain a unified view of mobile and broader enterprise exposure, enabling them to prioritize remediation based on risk. Mobile Operating System, app, and SDK patch levels, known exploited vulnerabilities (KEVs), embedded application software supply chain risks, and other active threats become actionable inputs for enterprise-wide risk decisions. Extending CTEM across mobile assets. The integration helps security leaders assess mobile exposure in a business context and extend a unified CTEM strategy across the enterprise. Key business benefits of the joint solution include: * Extends CTEM to Mobile: Closes a critical visibility gap by extending CTEM to mobile devices and their applications, providing security teams with a consistent framework for assessing and prioritizing exposure across the enterprise. * Prioritizes Mobile Risk: Integrates Lookout software exposure intelligence on mobile OS patch levels, known vulnerabilities, and active exploitation, as well as risks in embedded SDKs and open-source dependencies into Qualys ETM, enabling teams to prioritize mobile remediation by business impact. * Turns Mobile Intelligence into Action: Connects mobile threat and software exposure findings to remediation workflows, helping teams move faster from detection to risk reduction. * Improves Asset Visibility and Compliance: Continuously feeds mobile device metadata into Qualys ETM, expanding enterprise asset inventory coverage and supporting compliance assessments and reporting. Executive commentary. "Mobile devices are a critical gateway to corporate data, and frontier AI is giving attackers new ways to exploit mobile vulnerabilities and scale sophisticated attacks," said Jim Dolce, CEO of Lookout. "Our integration with Qualys brings mobile software exposure into enterprise-wide risk management, giving Risk Operations teams the visibility to prioritize emerging threats and the quantifiable data to demonstrate measurable risk reduction." "Every time a far-reaching vulnerability like PHP2Shell hits, the board asks, 'Are we exposed?' That answer is incomplete when mobile assets sit outside the Risk Operations Center's view," said Shailesh Athalye, chief product solutions officer at Qualys. "Working with Lookout, we are bringing mobile threat intelligence into Qualys Enterprise TruRisk Management (ETM) for a unified view of enterprise cyber risk across on-premises, cloud, and mobile, so teams can prioritize remediation based on business impact and measure exposure reduction holistically across the enterprise." Availability and deployment. The core ecosystem integration between Lookout Mobile AI Security and Qualys ETM is now generally available. Delivered entirely cloud-to-cloud, it requires no on-premises infrastructure or additional software. Joint customers can activate the integration at no additional cost by configuring secure API connectors through their existing Lookout and Qualys administration consoles. [1] Gartner, Strategic Roadmap for Continuous Threat Exposure Management, 26 August 2025. GARTNER is a trademark of Gartner, Inc. and/or its affiliates. About Lookout. Lookout, Inc. is the pioneer and leader in AI security for the mobile workforce. Backed by more than 15 years of specialized expertise and one of the industry's most comprehensive mobile threat telemetry datasets, Lookout empowers organizations to secure and govern the modern, mobile-driven enterprise. To learn more, visit www.lookout.com or follow Lookout on LinkedIn. Subscribe.

Lookout launches mobile module to detect AI-powered text and voice scams. Mobile security company Lookout Inc. today launched Social Engineering Protection, a module that analyzes text messages and phone calls for signs an employee is being manipulated into handing over credentials or money. The release goes after a problem Lookout argues email security tools and awareness training were never built to solve. Business conversations have moved onto SMS, voice calls and messaging apps, where corporate inspection tools mostly have no reach. Generative artificial intelligence made the lures running over those channels cheap to personalize. Smishing protection is the first of three components. The software reads incoming text and multimedia messages on iOS and Android, including those sent over Rich Communication Services, and flags malicious links in them. Lookout said the same analysis weighs the intent behind a message, which catches approaches that carry no link at all. Voice coverage works on live calls and voicemail. Transcription surfaces the scam patterns in what a caller actually says. A separate check examines the voice itself for signs it was cloned or machine-generated. The third component works on the number rather than the content. Mobile identity signals and phone number attributes feed a risk assessment that separates a legitimate caller from one behaving suspiciously. Administrators can block known or suspicious numbers across an entire workforce from a single console. "Frontier AI has fundamentally changed the economics of cyber offense, making highly sophisticated social engineering accessible to mainstream attackers," said Praveen Mamnani, chief product officer at Lookout. He added that those defenses were built before attackers could run the same approach across text, voice and messaging at once. The launch gives Lookout a third pillar for what it calls its Mobile AI Security Platform. In April the company shipped AI Visibility and Governance, a product that tracks what employees do with generative and agentic AI apps on their phones. The Mobile Software Exposure Center followed in July. That tool takes compiled mobile apps apart to find vulnerable libraries and outdated software development kits buried inside them. Lookout released Smishing AI in September last year, bringing large language models to bear on the content and intent of incoming text messages. Executive impersonation protection had landed on the platform a year before that. Social Engineering Protection is sold as a native add-on to the Mobile AI Security Platform. Existing customers can switch it on from the admin console they already run, with no additional agent or infrastructure to deploy. Image: Lookout. A message from John Furrier, co-founder of SiliconANGLE: Support its mission to keep content open and free by engaging with theCUBE community. Join theCUBE's Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. * 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more * 11.4k+ theCUBE alumni - Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from its Marketplace portal page and links: https://siliconangle.com/aws-marketplace/. About SiliconANGLE Media. SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios - with flagship locations in Silicon Valley and the New York Stock Exchange - SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Its new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.

Lookout has launched Social Engineering Protection, a new module within its Mobile AI Security Platform designed to combat AI-powered mobile threats. The system combines intent-driven AI, carrier-level phone verification, and synthetic voice analysis to protect against attacks including linkless smishing and voice phishing. The module offers smishing protection by analysing SMS, MMS, and RCS messages on iOS and Android devices. It also provides vishing protection through audio and voicemail analysis to detect AI-generated voice clones and deepfakes. Additionally, it uses mobile identity signals to authenticate phone numbers and enable centralised call blocking. Social Engineering Protection is available as a native add-on for existing Lookout platform customers, who can activate it through their unified admin console without additional infrastructure.