PortSwigger Burp Suite Enterprise Edition vs Qualys VMDR comparison

PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR

Download the complete report

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

PortSwigger Burp Suite Ente...

Ranking in Vulnerability Management

22nd

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Dynamic Application Security Testing (DAST) (5th)

Qualys VMDR

Ranking in Vulnerability Management

2nd

Average Rating

8.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

IT Asset Management (4th), Configuration Management Databases (2nd), Container Security (12th), Risk-Based Vulnerability Management (3rd)

Mindshare comparison

As of January 2025, in the Vulnerability Management category, the mindshare of PortSwigger Burp Suite Enterprise Edition is 1.2%, down from 1.2% compared to the previous year. The mindshare of Qualys VMDR is 11.1%, down from 13.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Hasan Abufreiha

Cyber security enthusiast at a university with 51-200 employees

Used for web application auditing and security audits for web applications

I would advise users to limit Burp Suite usage to specific scenarios and applications. Users should use the solution as an expert testing tool instead of using it as a general scanner or for information gathering in general. The tool might be overwhelming initially for new users, but it will be easy after you get used to the UI, features, and options. PortSwigger Burp Suite Enterprise Edition has been doing an amazing job for years compared to other similar tools. Overall, I rate the solution an eight out of ten.

Read full review

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

"The most appreciated functionality of PortSwigger Burp Suite is its ability to perform brute force attacks automatically."

"The tool is loaded with many features that give us ROI."

"The solution's extensions really expand the capabilities and features offered by the installation."

"The most valuable features of PortSwigger Burp Suite Enterprise Edition are the vast amount of options and ease of use. They frequently improve the solution every six months to a year. Additionally, if we want any more features we can upload a custom script to meet our needs."

"The initial setup is straightforward."

"Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition."

"I like normal dynamic scanning, general web applications scanning, and vulnerability assessments."

More PortSwigger Burp Suite Enterprise Edition pros

"The most valuable feature is automation."

"The most valuable feature is the certificate management."

"It's stable and quite reliable."

"Qualys VMDR provides a real-time response and reporting feature, which is excellent."

"Qualys VM's best feature is vulnerability management."

"It's very configurable to adjust impact to systems."

"Technical support is great and we've never really had a problem."

"This solution gives us insight into our environment and improves our security. It helps us to maintain a good patching system whereby we know that XYZ is vulnerable within the system."

More Qualys VMDR pros

Cons

"The stability of the scans could be improved."

"The product needs to have the ability to evaluate more."

"The solution is a bit expensive."

"PortSwigger Burp Suite Enterprise Edition should incorporate a static code analysis feature. One main issue we encounter is false positives. False positives can be challenging for developers."

"Scalability could be better."

"It would be better if the solution is cloud-based."

"From my personal experience, the solution's performance could be improved."

"There's definitely room for improvement. There are lots of false positives. Once I do the manual assessment, it comes as a false positive. They need to improve the Enterprise Edition, especially the part that gives false positives."

More PortSwigger Burp Suite Enterprise Edition cons

"It is a struggle to be able to pull our report and to be able to do onboarding using automated tools."

"The response time of technical support takes a while."

"While Qualys VMDR is comprehensive, improvements in asset management functionality would be beneficial."

"I would like to see more accuracy in detections, better reporting capabilities, and better dashboard download capabilities."

"If anything, I would like to see the user interface modernized a bit more."

"One area of the product that could be improved is the management of vulnerabilities detected on disabled applications."

"Qualys could improve the inbuilt dashboards."

"Certain integration factors between different options could be improved."

More Qualys VMDR cons

Pricing and Cost Advice

"For Professional, it's about $400 per year."

"The tool's pricing is reasonable and costs around 400 dollars per year."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

"The product is more expensive than that of any other vendor."

"The license is on a yearly basis."

"It's very expensive, especially if you want to use multiple modules of Qualys."

"The solution is expensive."

"Qualys VM is reasonably priced."

"I used to work there, so I never paid for the product. As an employee, we get a lifetime license for personal use, and that's what I'm using. It is a comprehensive platform, so there is a lot more to it. There could be other solutions that are probably a little bit cheaper, but it depends on what people need. Different people have different needs. It offers many things on the same platform. If you add all the things up, it should be cheaper, but I have not done any analysis specifically."

"The pricing is very competitive."

"They have recently changed the pricing model, which is now better than it was before."

More Qualys VMDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

13%

Government

Manufacturing Company

Educational Organization

36%

Financial Services Firm

10%

Computer Software Company

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PortSwigger Burp Suite Enterprise Edition?

Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition.

What is your experience regarding pricing and costs for PortSwigger Burp Suite Enterprise Edition?

I am using the Community Edition, which is free, however, I understand there might be extra expenses for additional features or services.

What needs improvement with PortSwigger Burp Suite Enterprise Edition?

It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively.

What is your primary use case for Qualys VM?

Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.

Acunetix vs PortSwigger Burp Suite Enterprise Edition

Comparisons

Compared 34% of the time

Fortify WebInspect vs PortSwigger Burp Suite Enterprise Edition

Compared 13% of the time

Tenable Nessus vs PortSwigger Burp Suite Enterprise Edition

Compared 10% of the time

Rapid7 Metasploit vs PortSwigger Burp Suite Enterprise Edition

Compared 7% of the time

Amazon Inspector vs PortSwigger Burp Suite Enterprise Edition

Compared 3% of the time

More PortSwigger Burp Suite Enterprise Edition Competitors

Tenable Nessus vs Qualys VMDR

Compared 18% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 7% of the time

Wiz vs Qualys VMDR

Compared 6% of the time

More Qualys VMDR Competitors

Product Reports

PortSwigger Burp Suite Enterprise Edition

Download PortSwigger Burp Suite Enterprise Edition product report

PortSwigger Burp Suite Enterprise Edition report

Qualys VMDR

Download Qualys VMDR product report

Also Known As

No data available

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance

Learn More

PortSwigger

Qualys

Overview

Burp Suite Enterprise Edition is an automated web vulnerability scanner, designed to enable enterprises to scale security across their web portfolios and achieve DevSecOps. Automate trusted Burp scans, integrate web security testing with development, and free your application security to support software development.

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Sample Customers

Nasa, Disney, Dow Jones, Iberia Bank, IBM, Ernest and Young, Apple, Ryanair, Thyssenkrupp, Delivery Hero

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR