Try our new research platform with insights from 80,000+ expert users

Fortra Tripwire IP360 vs Qualys Web Application Scanning comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortra Tripwire IP360
Average Rating
7.0
Number of Reviews
6
Ranking in other categories
Vulnerability Management (49th)
Qualys Web Application Scan...
Average Rating
7.8
Number of Reviews
35
Ranking in other categories
Application Security Tools (12th), Static Application Security Testing (SAST) (11th)
 

Mindshare comparison

Fortra Tripwire IP360 and Qualys Web Application Scanning aren’t in the same category and serve different purposes. Fortra Tripwire IP360 is designed for Vulnerability Management and holds a mindshare of 0.4%, down 0.4% compared to last year.
Qualys Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.9% mindshare, down 2.3% since last year.
Vulnerability Management
Application Security Tools
 

Featured Reviews

Corey Cole - PeerSpot reviewer
Jul 12, 2023
The solution helps users to manage their entire IP range, but it's unreliable and very expensive to maintain
Only the administrator was using the product. He used it to read reports as part of our compliance programs. It wasn't heavily used by a lot of users. The tool comes in at a large scale, and we tried to scale it down. The scaling did not apply to us. It was neither difficult nor easy. I rate the scalability a five out of ten. We had some challenges while scaling it down. It could do 10,000 devices, and we wanted to use it for ten devices. The process was difficult and expensive. We did not need the product anymore.
SubhajitAich - PeerSpot reviewer
Aug 25, 2023
A stable solution that can be used for infrastructure vulnerability scanning and web application scanning
We use the solution for multiple purposes, such as infrastructure vulnerability scanning and web application scanning Qualys Web Application Scanning has multiple features like threat protection and container security scanning in one box. Qualys Web Application Scanning is very complex to use,…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's become the pinnacle point for anything that enters the network or anything that's passing through to production to first be affected by IP360, hardened, and up to standard. For our integrity management, one was deployed in the bank about two years ago and that's still going to expand the usage and the product itself. That will go hand in hand with training and expanding the product as for where it's deployed."
"We could manage our entire IP range with the solution."
"Tripwire IP360 is a very stable solution."
"The most valuable features are the scheduled scanning, detailed reports, asset management, the knowledge database, and the overall product framework."
"I have found the detection of vulnerabilities tool thorough with good results and the graphical display output to be wonderful and full of colors. It allows many types of outputs, such as bar and chart previews."
"It is a cloud-based solution, so it is easy to scale."
"Its most valuable features are patch management, vulnerability management, and PCI compliance."
"​This product is designed for easy scalability and can easily scale up ​without major challenges."
"You can integrate your Burp Suite results and create an integrated report. Also, the way it shows the results - threats and exploit details - makes remediation very easy."
"It scans web applications to identify vulnerabilities during deployment."
"The vulnerability management feature is a strong one. And also the patch management feature."
 

Cons

"The reporting functions can use improvement. There is room for growth because reporting functions differ a lot depending on what you're going to output. It depends on whether it's for technical or senior management and how it's interpreted. There could be growth within the reporting functionality side."
"We need to dedicate time and resources to keep it running."
"I am not very impressed by the technical support."
"When comparing this solution to Veracode, Veracode has good interactive features and gives a clear understanding of what the vulnerabilities are, which error line of the vulnerability is on and what can be done. It gives interactive features, whereas this solution does not give a clear understanding of where or how to fix the problem."
"One area for improvement is the user interface. The new UI, which was recently upgraded, feels more complex and less user-friendly than the old version."
"The support could be faster."
"The pricing does not seem to be competitive."
"The scanner reports a lot of false positives, which is something that needs to be improved."
"Qualys Web Application Scanning is very complex to use, and its graphical interface is not very user-friendly."
"There should be better visibility into the application."
"We procured around 110 licenses for Web Application Scanning, but we have issues running concurrent scans. I don't currently have the option to trigger scans for all 100-plus websites. The default limit is around 10 conference scans. It's not very scalable, to be honest, because of the limitation that they put on concurrent scans."
 

Pricing and Cost Advice

"The product was expensive for us."
"I believe the price compares well within the market."
"Licensing was based on the number of assets that you want to scan on your network. You can also do licensing on subscription. On subscription, it is easier and more flexible. You tell Qualys that you want to move from the 1000 to 2000 band or the 3000 or 5000 band, then they will give you the quotation for it. Once you pay for it, applying the licensing is quite easy and effective."
"It is an expensive platform."
"I rate the software’s pricing a six out of ten."
"Pricing was reasonable and competitive. It was not too far above the other products."
"The cost is $30,000 USD for one year to cover WAS (Web Application Security) and the VM (Virtual Machine) security in a company with 200 employees."
"We normally purchase an annual license."
"We are on an annual license for the solution and the pricing could be more affordable."
"The product pricing is fair and reasonably priced."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
814,763 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Computer Software Company
14%
Media Company
8%
Government
7%
Computer Software Company
16%
Financial Services Firm
15%
Manufacturing Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Tripwire IP360?
We could manage our entire IP range with the solution.
What is your experience regarding pricing and costs for Tripwire IP360?
The product was expensive for us. It was not cost-effective for how we used it to do the job. We didn't think it was worth the money.
What needs improvement with Tripwire IP360?
It's an enterprise-level tool. If we’re not putting it in everything, it's very expensive to maintain in terms of people and time. We need to dedicate time and resources to keep it running. It was ...
What do you like most about Qualys Web Application Scanning?
The vulnerability management feature is a strong one. And also the patch management feature.
What needs improvement with Qualys Web Application Scanning?
One area for improvement is the user interface. The new UI, which was recently upgraded, feels more complex and less user-friendly than the old version. However, as we continue to use it, we antici...
 

Also Known As

IP360
Qualys WAS
 

Learn More

 

Overview

 

Sample Customers

1. Aetna 2. Accenture 3. Adidas 4. AIG 5. Airbus 6. Akamai 7. Amazon 8. American Express 9. Aon 10. Apple 11. ATT 12. Autodesk 13. Bank of America 14. Barclays 15. Bayer 16. Bechtel 17. BlackRock 18. Boeing 19. BNP Paribas 20. Cisco 21. CocaCola 22. Comcast 23. Dell 24. Deutsche Bank 25. eBay 26. ExxonMobil 27. FedEx 28. Ford 29. General Electric 30. Google 31. HP 32. IBM
BskyB, Cartagena, ClearPoint Learning Systems, Connect Group, du, Fortrex Technologies, HBOR, HDI, Highlights for Children, The Lithuanian State Enterprise Centre of Registers, City of Miami Beach, Microsoft, MidlandHR, MSCI Inc., Northern Arizona University, Ofgem, Olympus Europa, PhoneFactor, RTL Nederland, ThousandEyes, VGZ Organisatie B.V.
Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management. Updated: October 2024.
814,763 professionals have used our research since 2012.