Try our new research platform with insights from 80,000+ expert users

BMC TrueSight Vulnerability Management vs Qualys VMDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 29, 2024
 

Categories and Ranking

BMC TrueSight Vulnerability...
Ranking in Vulnerability Management
63rd
Average Rating
7.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Qualys VMDR
Ranking in Vulnerability Management
2nd
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
92
Ranking in other categories
IT Asset Management (4th), Configuration Management Databases (3rd), Container Security (12th), Risk-Based Vulnerability Management (3rd)
 

Mindshare comparison

As of December 2024, in the Vulnerability Management category, the mindshare of BMC TrueSight Vulnerability Management is 0.2%, down from 0.2% compared to the previous year. The mindshare of Qualys VMDR is 11.4%, down from 13.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management
 

Featured Reviews

reviewer1199817 - PeerSpot reviewer
Good features for infrastructure application; lacking in integrations with other software
There is always room for improvement in all products. With BMC I'd like to see the ability to integrate with other software. For example, having a CMDB, access to Qualys, or because we've found something from BMC, to be able to work closely to find a solution. The idea would be that it's all updated from one point automatically. I'm looking for third-party applications and integrations with other software.
Harold Jensen - PeerSpot reviewer
Good visibility but expensive and needs better support
Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Takes reports from other vulnerabilities."
"It's really beneficial for scanning and interacting with the agent."
"The process of defining and discovering scans is organized efficiently."
"The biggest benefit is from a security operations perspective, where we are able to drive our security posture upwards by remediating any discovered vulnerabilities."
"Technical support is fantastic."
"The best features of Qualys VMDR are its patch management capabilities and the ability to mitigate vulnerabilities automatically."
"There are fewer false positives when using this solution."
"The most valuable features of Qualys VMDR include patch management and the use of virtual scanners to scan appliances and devices, especially those provided by vendors where we cannot manage them ourselves."
"The initial setup is straightforward."
 

Cons

"No third-party applications or integrations with additional software solutions."
"They should make it accessible for more operating systems."
"They have integrated with other third parties, but it is still not viable."
"Make some minimal dashboard improvements."
"Support could be improved since the response can be slow."
"It would be nice to have an all-in-one solution that was automated and could handle the scanning and reports as well as the patching and updating."
"There's a need to upgrade or fix the potential vulnerability rate. Around 20,000 potential vulnerabilities were showing in Qualys VMDR, but none of the other tools showed them. When we checked, it wasn't the case. Support explained that even small issues were being counted as vulnerabilities, causing issues in our audit. So, the security features could be improved to identify vulnerabilities accurately."
"It would be helpful to have features for better tracking, including options for adding relevant owners or supporting groups for each asset."
"The only improvement I can think of is on the implementation side. At times it is a bit slow."
 

Pricing and Cost Advice

Information not available
"The solution is expensive."
"It is more expensive than other products on the market."
"When you want to cover yourself for scalability, you will be charged for the number you place on the scan itself."
"Usually every implementation is different and the quote is in function of number of assets."
"It is different for every company, but for us, it's every three years."
"They have recently changed the pricing model, which is now better than it was before."
"It's very expensive, especially if you want to use multiple modules of Qualys."
"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
824,067 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Educational Organization
36%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What is your primary use case for Qualys VM?
Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...
What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...
What is your experience regarding pricing and costs for Qualys VMDR?
For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.
 

Also Known As

TrueSight Vulnerability Management, SecOps Response Service, BladeLogic Threat Director
Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance
 

Learn More

 

Overview

 

Sample Customers

Online Business Systems
Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management. Updated: November 2024.
824,067 professionals have used our research since 2012.