Qualys VMDR Reviews

Name: Qualys VMDR
Brand: Qualys
Rating: 4.1 (92 reviews)

Vendor: Qualys

4.1 out of 5

92 reviews
94% willing to recommend

3,322 followers

Post review

What is Qualys VMDR?

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Get the Qualys VMDR Buyer's Guide and find out what your peers are saying about Qualys VMDR, Wiz, Tenable Nessus and more!

Qualys VMDR is the #2 ranked solution in top Vulnerability Management solutions, #3 ranked solution in top Configuration Management Databases, #3 ranked solution in top Risk-Based Vulnerability Management solutions, #4 ranked solution in top IT Asset Management solutions, and #12 ranked solution in Container Security Solutions. PeerSpot users give Qualys VMDR an average rating of 8.2 out of 10. Based on the analysis of the 92 most recent Qualys VMDR reviews, the overall sentiment is positive, with a sentiment score of 7.1. Qualys VMDR is most commonly compared to Wiz: Qualys VMDR vs Wiz. Qualys VMDR is popular among the midsize enterprise segment, accounting for 44% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 36% of all views.

Helped 823,875 peers since 2012

Featured reviews

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Cloud Agents: lots of control available and very trouble-free. It pulls all systems information, including installed software and open ports. It's very configurable to adjust impact to systems. Connectors: Pulls all the cloud information per account and helps to build a CMDB. Qualys connectors do some control evaluations to help manage these accounts. Global Asset View (GAV): With the ability to establish dynamic tagging and perform queries GAV has become a very valuable research tool to our teams.

Read full review

Koketso Ditlhage

Information Communication Technology Specialist at UNIVERSITY OF JOHANNESBURG

We integrate Qualys VMDR with our infrastructure, conducting weekly scans and generating reports based on the findings. This provides daily views of vulnerabilities, and we use Qualys' patch management to deploy patches promptly, starting with the most severe vulnerabilities, thus reducing our threat exposure. Conducting a thorough proof of concept is essential to evaluate its effectiveness in your environment and to see how it integrates with your existing systems and handles your specific security needs. I rate it a ten out of ten.

Read full review

Venkata Kalla

Information & security engineer at Infosys

We use continuous monitoring to schedule scans for all the applications in our organization. We create a parent tag and sub-tags for each application and schedule scans based on our requirements, such as every alternate day, weekly, or monthly. This helps us identify vulnerabilities in the web…

Read full review

Qualys VMDR mindshare

Product category:

As of December 2024, the mindshare of Qualys VMDR in the Vulnerability Management category stands at 11.4%, down from 13.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Vulnerability Management

PeerAnalyst reports

Type	Title	Date
Category	Vulnerability Management	Dec 18, 2024	Download
Product	Reviews, tips, and advice from real users	Dec 18, 2024	Download
Comparison	Qualys VMDR vs Tenable Nessus	Dec 18, 2024	Download
Comparison	Qualys VMDR vs Wiz	Dec 18, 2024	Download
Comparison	Qualys VMDR vs Tenable Security Center	Dec 18, 2024	Download

Title	Rating	Mindshare	Recommending
Wiz	4.5	10.8%	100%	20 interviews Add to research
Tenable Nessus	4.2	12.6%	98%	80 interviews Add to research

Valuable Features

Qualys VMDR's most valuable features include real-time vulnerability management, cloud integration, and prioritization of threats. Its comprehensive dashboard and intuitive user interface assist in efficient scans and reporting. The system excels in asset management and offers continuous monitoring with automatic updates. Users benefit from its robust vulnerability detection, patch management, and effective compliance tracking. Its scalability and ease of deployment are noted, alongside impressive reporting capabilities with detailed analysis features.

"Qualys VMDR provides a real-time response and reporting feature, which is excellent."
"Qualys VMDR provides a real-time response and reporting feature, which is excellent."
"Overall, the solution is highly rated because of its simplicity and efficiency."

Room for Improvement

Qualys VMDR needs enhancements in reporting and user interface to improve usability. Documentation and support are insufficient, complicating system navigation. Cloud dependencies and high costs pose challenges for smaller firms. The scanning process is slow and integration with other tools is suboptimal. There are issues with false positives and asset management. Authenticated scanning is limited, and a better approach to prioritizing vulnerabilities is necessary. Automated patching and a more streamlined interface would benefit users.

"If AI features were integrated, it could enhance the capabilities significantly."
"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."
"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."

ROI

Qualys VMDR enables frequent scanning of environments to reduce vulnerabilities and business risk. It enhances network upgrades and patching, leading to strengthened security and reduced hacking risks. Users report significant improvements, including streamlined patch management and vulnerability reduction, resulting in cost, time, and resource savings estimated at twenty to thirty percent. Despite concerns about rising costs, Qualys VMDR provides clear asset management insights and substantially lowers cybersecurity risks, thereby achieving notable ROI.

Pricing

Qualys VMDR's pricing is perceived as high, particularly compared to competitors like Tenable and Nessus, with annual costs often exceeding $100,000 without discounts. Licensing is primarily annual, based on asset count, with additional fees for features such as patch management and EDR compliance. The pricing is more suitable for large organizations, offering flexibility and volume discounts. While considered expensive, the comprehensive features and performance justify the cost for many enterprises.

"The solution is reasonably priced for the value it provides."
"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."
"The product is more expensive than that of any other vendor."

Popular Use Cases

Organizations use Qualys VMDR primarily for vulnerability management, asset inventory, and compliance across cloud and on-premises environments. It supports detecting vulnerabilities on servers, workstations, and web applications while facilitating patch management. Companies deploy agents and utilize scanners for comprehensive scanning and reporting, ensuring systems are secure and compliant. Some utilize it for specific use in web application security or managing containers and cloud environments like Azure and AWS.

Service and Support

Qualys VMDR's customer service is generally rated as good, with some noting fast responses and helpfulness, while others find the response time could be shorter. Technical support receives mixed feedback; many praise its responsiveness and expertise, while others report slow resolutions and generic answers. Users appreciate available resources like forums and documentation, yet some suggest improvement in problem-solving efficiency. The need for enhanced support speed and communication is a recurrent theme among users.

Deployment

Users report that Qualys VMDR's initial setup is generally straightforward and simple, especially for those with prior technical knowledge or clear network layouts. The process involves deploying agents, configuring settings, and using the cloud-based platform, which often supports fast implementation. Some users, however, mention complexities related to larger environments or specialized configurations, requiring collaboration across teams. Support from Qualys and its comprehensive documentation aid in mitigating challenges during deployment.

Scalability

Qualys VMDR demonstrates impressive scalability, managing extensive networks efficiently. Users report smooth scaling, handling large numbers of assets without encountering issues. As a cloud-based platform, it easily supports increasing demands, enabling seamless expansion. Cost may rise with resource demands, but it efficiently adapts to different organizational needs. Many find it quick to scale across various clients and emphasize its effectiveness in handling large deployments, offering robust API extensibility and user management options.

Stability

Qualys VMDR is highly stable, with users rarely encountering issues apart from scheduled downtimes. While some users noted occasional problems with reports or browser compatibility, most agree that it provides excellent performance with minimal glitches. Users rate stability highly, typically around 8 to 9 out of 10. Although large data handling may be slow, Qualys VMDR is considered reliable and effective for managing vulnerabilities.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys VMDR Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Educational Organization

36%

Computer Software Company

11%

Financial Services Firm

10%

Manufacturing Company

Government

Healthcare Company

University

Retailer

Insurance Company

Energy/Utilities Company

Comms Service Provider

Media Company

Non Profit

Construction Company

Wholesaler/Distributor

Real Estate/Law Firm

Hospitality Company

Transportation Company

Legal Firm

Outsourcing Company

Performing Arts

Pharma/Biotech Company

Logistics Company

Recreational Facilities/Services Company

Consumer Goods Company

Compare Qualys VMDR with alternative products

Learn more about Qualys VMDR

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Qualys VMDR was previously known as Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance.

Product Video

Qualys VMDR customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx