Qualys CyberSecurity Asset Management Reviews

Name: Qualys CyberSecurity Asset Management
Brand: Qualys
Rating: 4.6 (19 reviews)

4.6 out of 5

19 reviews
100% willing to recommend

What is Qualys CyberSecurity Asset Management?

Qualys CyberSecurity Asset Management provides advanced real-time asset visibility, dynamic tagging, and External Attack Surface Management. It streamlines asset discovery and management using cloud agents and IP-based scanning, enhancing risk management and software lifecycle tracking.

Get the Qualys CyberSecurity Asset Management Buyer's Guide and find out what your peers are saying about Qualys CyberSecurity Asset Management, Armis, Axonius and more!

Qualys CyberSecurity Asset Management is the #2 ranked solution in top Cyber Asset Attack Surface Management (CAASM) solutions, #4 ranked solution in top Attack Surface Management (ASM) solutions, #7 ranked solution in top Software Supply Chain Security solutions, #8 ranked solution in top Patch Management solutions, and #11 ranked solution in top Vulnerability Management solutions. PeerSpot users give Qualys CyberSecurity Asset Management an average rating of 9.2 out of 10. Qualys CyberSecurity Asset Management is most commonly compared to Armis: Qualys CyberSecurity Asset Management vs Armis. Qualys CyberSecurity Asset Management is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 23% of all views.

Buyer's Guide

Qualys CyberSecurity Asset Management

February 2025

Get the report

Helped 839,319 peers since 2012

Featured Qualys CyberSecurity Asset Management reviews

Revathi VeeraRaghavan

Information Security - Manager at Infosys

I like the EASM part because it provides visibility into unmanaged assets that are public-facing. Previously, we had to log in to Shodan and get the details. Instead of that, Qualys has an external scanner that scans the assets belonging to, for example, Infosys. We give the domain, subdomains, and any related subsidiaries in the configuration. Based on that, it scans the domain and gives correlated results with the public-facing IP and the internal IP used in Infosys for an asset. I can see both interfaces in EASM. I can see the software details for all the assets and any ports that are open on the assets.

Read full review

Scott Frederick

Director of Vulnerability Management at a insurance company with 1,001-5,000 employees

Our favorite features are the tagging and the ability to quickly find assets in the portal. Additionally, I do like the fact that Qualys CSAM is integrated with the rest of our vulnerability scanning utilities. We use the full suite from Qualys. The fact that it is integrated makes it very easy to understand. It shares tagging information with VMDR. That is very nice. Qualys CSAM has discovered assets not previously covered by our vulnerability management program. Primarily, if we have assets without vulnerabilities, they become less visible, but Qualys CSAM alerts us to them because they have IP addresses and are attached to our network. It could discover everything from printers to servers to endpoints. It could discover UPSs, network devices, and across all operating systems. It discovers our security badge readers and digital signage. We have to feed that the IP address ranges, but beyond that, it finds everything in our internal network. We were able to realize its benefits within the first quarter of installing it. We did have to take some time to learn it and understand how to operationally leverage what it was telling us, but it was very quick. In addition to vulnerabilities, Qualys CSAM helps identify other risk factors to a degree. For instance, we can see if servers or assets have incorrect naming standards. We have our network segmented into development model, test, and production, and we have server naming standards that identify which management they should be in. If a production server has the naming standard of a development model server, we can find that. That is one area we have used it for. We are not fully using TruRisk, but we are using the Qualys detection score that is central to our corporate risk prioritization approach. It has completely replaced our homegrown one.

Read full review

Curtis Nielson

Security Operations Manager at Solventum

Defense-in-depth is very important. There are many layers to a network. There are many layers to an operating system, and there are many layers to applications. It is essential to provide security, detection, and prevention at each one of those layers. To a colleague at another company who says they only need to add External Attack Surface Management to their vulnerability management detection/response program but they do not need the full depth of the CSAM offering, I would say that they are likely to get hacked. We do not use Qualys CSAM for the entire attack surface. We primarily use it for production deployments. Our entire attack surface, corporate-wise, is managed elsewhere. It is competitive. It is not the best that I have seen, but it is competitive. TruRisk Scoring helps prioritize vulnerabilities and assets, but we do not use it all that much. Our reporting requirements are tied to CVE rankings. While we sometimes take a look at it, we do not rely on it. We use the solution's CMDB Sync feature, but we use it more as a confirmation of an existing CMDB tool we have. I would rate Qualys CSAM an eight out of ten.

Read full review

Qualys CyberSecurity Asset Management mindshare

Product category:

As of March 2025, the mindshare of Qualys CyberSecurity Asset Management in the Cyber Asset Attack Surface Management (CAASM) category stands at 6.4%, up from 1.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cyber Asset Attack Surface Management (CAASM)

PeerAnalyst reports based on Qualys CyberSecurity Asset Management reviews

Type	Title	Date
Category	Cyber Asset Attack Surface Management (CAASM)	Mar 4, 2025	Download
Product	Reviews, tips, and advice from real users	Mar 4, 2025	Download
Comparison	Qualys CyberSecurity Asset Management vs Axonius	Mar 4, 2025	Download
Comparison	Qualys CyberSecurity Asset Management vs Armis	Mar 4, 2025	Download

Title	Rating	Mindshare	Recommending
Armis	4.3	23.8%	87%	8 interviews Add to research
Axonius	4.3	36.0%	100%	6 interviews Add to research

Valuable Features

Qualys CyberSecurity Asset Management offers features like end-of-life software insights, dynamic tagging, asset purge rules, and external attack surface management. Users value in-depth visibility, real-time monitoring, integration with vulnerability scanning, and efficient application management. It provides asset discovery through cloud agents and IP scanning, categorizes based on dynamic tags, and offers automated vulnerability scanning. Organizations appreciate automated solutions for finding and managing unauthorized software and the ability to integrate with CMDB.

"I appreciate the feature that simplifies cloud security posture, offering insights into vulnerabilities, and reducing the complexity of managing the security program."
"Authorized and unauthorized software visibility is the best feature for me."
"Authorized and unauthorized software visibility is the best feature for me. It helps me understand security controls on our network and where we lack visibility. With a single security tool, we are able to get an extensive list."

Room for Improvement

Qualys CyberSecurity Asset Management needs improvements in integration with various tools beyond ServiceNow and more cost-effective options. Users want enhanced customization for reports and dashboards, along with better user interface and experience. There is demand for refined scan configurations, improved agent performance, and expanded tagging options. More flexibility in role-based access control, streamlined updates, and faster processes are also requested. Enhanced learning resources and vulnerability remediation context would benefit users significantly.

"Based on the company's budget, Qualys offers limited features, which can also be utilized in other environments."
"There can be further simplification to reduce the overall noise and provide ESAM-related data."
"There can be further simplification to reduce the overall noise and provide ESAM-related data."

ROI

Qualys CyberSecurity Asset Management improved efficiency by automating tasks and reducing necessary resources, saving about 45% in time and decreasing costs by 35%. It provided comprehensive visibility into security infrastructure and enhanced vulnerability management. Reduced security incidents and labor costs increased trust and resulted in new contracts worth approximately $99,000. The improved infrastructure contributed to business growth of about 150% over the past year, achieving a return on investment of 95%.

Pricing

Qualys CyberSecurity Asset Management is perceived as expensive, particularly for small organizations, but offers a range of integrated features in one license. Pricing is transparent, competitive, and includes flexible options tailored to specific needs. Though costs are high for some, the value provided and market competitiveness make it a viable option, especially when bundled with services like VMDR. Its suitability varies with organization size and asset volume.

"The pricing for Qualys CSAM is nominal."
"The pricing is market-competitive."
"The Qualys Cybersecurity Asset Management pricing is well-aligned with our usage."

Popular Use Cases

Organizations utilize Qualys CyberSecurity Asset Management to manage technical debt, track end-of-life software and hardware, enhance visibility into assets, and improve security posture. It identifies vulnerabilities, unauthorized software, and integrates with tools like EASM. Businesses benefit from comprehensive asset information, supporting compliance and reducing attack surfaces. Asset tracking and license management aid in monitoring infrastructure, while CSAM's cloud-based capabilities improve asset visibility and security effectiveness. Collaboration with cyber defense teams optimizes external service management.

Service and Support

Qualys CyberSecurity Asset Management customer service is consistently praised for its responsiveness and knowledgeable support team. Users appreciate the technical expertise and prompt assistance provided, especially in addressing complex issues. Documentation and forums are valuable resources, although minor delays may occur when issues are escalated. Governance calls and quick ticket responses enhance support quality. Despite some occasional delays, the customer service and technical support receive high ratings, with many users expressing high satisfaction levels.

Deployment

Users found Qualys CyberSecurity Asset Management's initial setup straightforward. Those with existing VMDR access transitioned quickly, while new implementations required more time. Many valued the ease of deploying cloud agents and appreciated the guidance from documentation and vendor support. The hybrid and cloud-based nature, with minimal need for ongoing maintenance, was frequently highlighted. Tagging and asset management took some consideration, but once configured, the system became operational swiftly. Challenges were manageable with vendor collaboration.

Scalability

Qualys CyberSecurity Asset Management scales across varying environments, managing anything from small installations to large deployments. Users report no issues with numerous endpoints and additional locations across countries like India and Germany. It's rated between nine and ten out of ten for scaling capabilities. The platform effectively integrates new features during expansions and supports around 300,000 assets globally. Users appreciate its impressive handling of extensive data from diverse modules and seamless scalability.

Stability

Qualys CyberSecurity Asset Management is reliable, experiencing occasional syncing and query issues post-updates. Stability is mostly rated between seven and ten out of ten. Some report agent slowness and network-related delays. The platform handles large data volumes effectively and maintains constant uptime. Updates add valuable new features, though some disconnections occur with high machine integration. Support resolves certain issues promptly, while some wait for new releases. Notifications help manage stability, keeping users informed of potential downtimes.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys CyberSecurity Asset Management Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

23%

Financial Services Firm

12%

Government

Retailer

Manufacturing Company

Insurance Company

Healthcare Company

Non Profit

Logistics Company

Comms Service Provider

University

Real Estate/Law Firm

Educational Organization

Outsourcing Company

Transportation Company

Wholesaler/Distributor

Construction Company

Energy/Utilities Company

Hospitality Company

Media Company

Performing Arts

Pharma/Biotech Company

Leisure / Travel Company

Photography Company

Legal Firm

Consumer Goods Company

Marketing Services Firm

Mining And Metals Company

Compare Qualys CyberSecurity Asset Management with alternative products

Learn more about Qualys CyberSecurity Asset Management

Qualys CyberSecurity Asset Management offers a comprehensive solution for managing asset inventories and tracking software lifecycle states. It facilitates network visibility and supports zero-day vulnerability solutions, enhancing security posture through efficient monitoring. Users benefit from its cloud-based interface, which provides in-depth asset configurations and insights. Key features include automated vulnerability scanning and unauthorized software management, reducing manual efforts. The platform also emphasizes the importance of timely remediation and ongoing risk mitigation across multiple environments. Despite its strengths, users note the need for enhanced integration with additional CMDBs beyond ServiceNow, as well as cost efficiency improvements. Requests also include better report customization, more scan control, and a simplified UI.

What are the key features of Qualys CyberSecurity Asset Management?

Real-time Visibility: Offers continuous insight into asset status and condition.
Dynamic Tagging: Allows for flexible organization and assessment of assets.
External Attack Surface Management: Identifies potential threats from external sources.
Automated Vulnerability Scanning: Reduces manual scanning efforts and identifies vulnerabilities instantly.
Unauthorized Software Management: Detects and manages software not approved for use.
Asset Purge Rule: Automates the removal of obsolete assets from the inventory.

What benefits should users look for in reviews?

Enhanced Security Posture: Gains stronger defense through effective asset monitoring.
Efficient Risk Management: Identifies threats quickly, enabling timely resolutions.
Improved Compliance: Assists in meeting industry standards and regulations.
Reduced Manual Effort: Automates repetitive tasks, saving time and resources.
Comprehensive Insight: Provides detailed data for informed decision making.

In industries like finance, healthcare, and manufacturing, Qualys CyberSecurity Asset Management enhances asset control by offering visibility into hardware and software configurations. It aids in maintaining security compliance and identifying unauthorized software, crucial for sectors with strict regulatory requirements.