Try our new research platform with insights from 80,000+ expert users

Axonius vs Qualys CyberSecurity Asset Management (CSAM) comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Axonius
Ranking in Cyber Asset Attack Surface Management (CAASM)
1st
Average Rating
8.6
Number of Reviews
6
Ranking in other categories
IT Vendor Risk Management (6th)
Qualys CyberSecurity Asset ...
Ranking in Cyber Asset Attack Surface Management (CAASM)
4th
Average Rating
9.4
Number of Reviews
5
Ranking in other categories
Vulnerability Management (14th), Patch Management (10th), Attack Surface Management (ASM) (5th), Software Supply Chain Security (7th)
 

Mindshare comparison

As of October 2024, in the Cyber Asset Attack Surface Management (CAASM) category, the mindshare of Axonius is 41.2%, down from 43.5% compared to the previous year. The mindshare of Qualys CyberSecurity Asset Management (CSAM) is 3.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cyber Asset Attack Surface Management (CAASM)
 

Featured Reviews

Kirubakaran Jayakumar - PeerSpot reviewer
Aug 16, 2024
Agentless and can easily integrate with other platforms and provides robust API monitoring capabilities
Axonius can improve on delivering compliance-related features, like PCI DSS, and different dashboards that work with various compliances. For example, if a company follows ISO, they can create a dashboard that shows the gaps within that compliance framework. They have started delivering some of these features, but the tool still needs to mature for companies that heavily rely on certain standards, like payment compliances or cloud security guidelines. In those cases, the tool might need further development. However, I haven’t had specific issues because they are really good at fixing things. Whenever we report or escalate something, they are quick in providing solutions. I think they are very flexible in terms of working with them. But at the same time, they are customizing the solution too much based on client requirements. This might cause issues in the future because if they keep customizing the solution for every single client’s requirement, they might face difficulties in future releases. Integrating every customer’s options within the platform might be challenging to handle. That might be a risk they are taking. But we have had good communication with them, and overall, it’s been positive.
Brad Mathis - PeerSpot reviewer
Jun 10, 2024
Improves visibility, reliability, and scalability
The external attack surface management identified unexpected assets, suggesting some exist outside our known inventory. While these may not be directly managed by us, the process has brought valuable awareness to the fact that our core servers are externally hosted, prompting a review of similar situations. An external attack surface management scan revealed several outsourced name services, along with one unexpected third-party-linked IP. It's unclear if this was due to past consulting work or a registration error, but since it wasn't relevant to our company, it was easily excluded from future scans. The benefits of Qualys CyberSecurity Asset Management are immediate. We already had the cloud agents installed. They were already on all the servers and workstations. Once we upgraded from the VMDR included GAV (Global AssetView) to CSAM, it was no time before I could see the end-of-life, end-of-service software, and hardware. In addition to vulnerabilities, CSAM provides a better view of other risk factors, but VMDR is very powerful. VMDR was already seeing our limitations in hardening our vulnerabilities. CSAM enhanced our view by adding more visibility and insight into what we have. TruRisk scoring goes beyond traditional vulnerability scoring like CVSS to prioritize both vulnerabilities and assets based on real-world exploitability and industry targeting. This provides a clearer picture of our actual risk by considering factors like published exploits and what attackers are currently focusing on, allowing us to quickly identify critical issues and avoid wasting time on vulnerabilities with a high theoretical risk but low real-world threat. Qualys Cloud Agents can now be configured as passive sensors to discover all devices on our network in real-time, eliminating the requirement for separate virtual or physical passive sensor appliances. These cloud agent sensors monitor network broadcasts instead of egress traffic, and they can even designate a secondary sensor to take over if the primary becomes unavailable, ensuring continuous asset discovery and populating our CSAM platform with managed and unmanaged devices.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Axonius provides preconfigured dashboards that can be customized to your needs."
"The automation capabilities in Axonius have streamlined our security operations."
"I like that the tool has a user-friendly interface. It helps organizations and big companies improve business requirements and control processes."
"The solution's technical support was good...The product's initial setup phase is pretty straightforward."
"he best feature I found in Axonius is that it shows us the duration of eCheck, and it shows us what device is down and in which part of the system life cycle or the checking part the system is down in."
"The end-of-life and end-of-service software and hardware are some of my favorite features."
"The best feature is asset discovery through their cloud agent or IP-based scanning."
"When you implement a dynamic tag using a query, you do not need to manually tag all the servers. It categorizes all the servers that come under that query. The tagging part is automatically done within a few minutes. It reduces the effort."
"The most valuable aspect we receive from Qualys is the remediation."
"Tags are very useful for us since we can tag virus applications in infrastructure types such as databases, operating systems, or web platforms."
 

Cons

"For Axonius, I would suggest supporting more ticketing platforms and enhancing API integration directly into the platform rather than just the connector. This would allow for better integration from different systems, possibly into workflows, which I think is currently lacking."
"Axonius can improve on delivering compliance-related features."
"We can have fetch cycle issues."
"Adding more detailed descriptions or YouTube videos about specific features would help improve the application."
"Regarding the improvement of Axonius, it goes halfway for both the tool and the user. If we set it up quickly from our end, and if the AD groups and all other groups assigned to tag the assets have been tagged correctly, Axonius could not show an error."
"For us, the product's deployment phase was a little challenging because we had to deal with other departments and business units."
"Qualys CyberSecurity Asset Management could be more cost-effective by offering a lower price point or integrating with existing VMDR features."
"Currently, whenever the agent is running, it consumes over ten percent of my CPU, indicating that CPU consumption is another area Qualys needs to address."
"It is automatically exporting the vulnerabilities and the assets. However, it would be useful to have the ability to select or to filter which we would like to export."
"In our reporting, we faced a challenge syncing with cloud devices."
"One improvement that they can make in the EASM module is the scan frequency. After EASM is configured the first time, it allows you to do the complete configuration, but if you want to reconfigure it, it will not ask or provide any option for scan frequency. For that, you need to raise a case with Qualys and talk to the Qualys team."
 

Pricing and Cost Advice

"We are on a subscription model with them."
"Axonius is quite a bit cheaper compared to other solutions."
"Qualys CyberSecurity Asset Management can be expensive, especially if we already have VMDR."
"Qualys offers excellent value for money."
"It is cost-effective because, in a single tool, we are getting everything. All the solutions come in a single license or price."
"The cost for Qualys CyberSecurity Asset Management is high."
report
Use our free recommendation engine to learn which Cyber Asset Attack Surface Management (CAASM) solutions are best for your needs.
813,572 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
12%
Government
8%
Manufacturing Company
8%
Computer Software Company
28%
Government
13%
Retailer
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Axonius?
Axonius is quite a bit cheaper compared to other solutions. And the amount of value they provide is really huge compared to other vendors. So, it’s based on the actual requirement and how you want ...
What needs improvement with Axonius?
Axonius can improve on delivering compliance-related features, like PCI DSS, and different dashboards that work with various compliances. For example, if a company follows ISO, they can create a da...
What is your primary use case for Axonius?
We use it for reporting, noncompliance reporting, and identifying gaps. We use it for API monitoring within our company. And we also use it as a CMDB. Our security team, people within the SOC team,...
What is your experience regarding pricing and costs for Qualys CyberSecurity Asset Management (CSAM)?
It is cost-effective because, in a single tool, we are getting everything. All the solutions come in a single license or price. In my opinion, Qualys is one of the best solutions available in the m...
What needs improvement with Qualys CyberSecurity Asset Management (CSAM)?
In Qualys CSAM, there is a module called EASM. One improvement that they can make in the EASM module is the scan frequency. After EASM is configured the first time, it allows you to do the complete...
What is your primary use case for Qualys CyberSecurity Asset Management (CSAM)?
I am working as a senior security analyst. I provide enterprise vulnerability management solutions. CyberSecurity Asset Management helps us categorize all the assets and products. We can see the cu...
 

Learn More

 

Overview

 

Sample Customers

Extreme Engineering Solutions, AppsFlyer, Landmark Health, Natera
Information Not Available
Find out what your peers are saying about Axonius vs. Qualys CyberSecurity Asset Management (CSAM) and other solutions. Updated: August 2024.
813,572 professionals have used our research since 2012.