PortSwigger Burp Suite Enterprise Edition vs Qualys VMDR comparison

PortSwigger and Qualys are both solutions in the Vulnerability Management category. PortSwigger is ranked #22 with an average rating of 8.3, while Qualys is ranked #2 with an average rating of 8.2. PortSwigger holds a 1.2% mindshare in VM, compared to Qualys’s 11.4% mindshare. Additionally, 83% of PortSwigger users are willing to recommend the solution, compared to 94% of Qualys users who would recommend it.

PortSwigger Burp Suite Ente...

Read 11 PortSwigger Burp Suite Enterprise Edition reviews

1,573 Views
961 Comparison Views

83% willing to recommend

Qualys VMDR

Read 92 Qualys VMDR reviews

13,118 Views
10,009 Comparison Views

94% willing to recommend

PortSwigger Burp Suite Ente...

Qualys VMDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 29, 2024

Qualys VMDR and PortSwigger Burp Suite Enterprise Edition are prominent in the vulnerability management arena, each offering distinct advantages. Users express greater satisfaction with Qualys VMDR's cost and support, yet PortSwigger Burp Suite Enterprise Edition is often viewed as superior due to its robust features and perceived value.

Features: Qualys VMDR is praised for its comprehensive asset management, real-time vulnerability detection, and seamless integration with various security tools. PortSwigger Burp Suite Enterprise Edition is noted for its advanced web vulnerability scanning capabilities, automated testing, and customizable security checks.

Room for Improvement: Users of Qualys VMDR suggest enhancements in reporting capabilities, faster scanning speeds, and a more intuitive user interface. For PortSwigger Burp Suite Enterprise Edition, the feedback highlights the need for improved scalability, more user-friendly documentation, and better performance during peak usage.

Ease of Deployment and Customer Service: Qualys VMDR has an easy cloud-based deployment model and effective customer service. PortSwigger Burp Suite Enterprise Edition requires more setup time, but its customer support is responsive and knowledgeable.

Pricing and ROI: Qualys VMDR is viewed as more cost-effective with a faster ROI, despite higher initial setup costs. PortSwigger Burp Suite Enterprise Edition is considered more expensive but is justified by its comprehensive features and long-term ROI.

To learn more, read our detailed PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR Report (Updated: December 2024).

Buyer's Guide

PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR

December 2024

Download the complete report

Helped 824,067 peers since 2012

Categories and Ranking

PortSwigger Burp Suite Ente...

Ranking in Vulnerability Management

22nd

Average Rating

8.0

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Dynamic Application Security Testing (DAST) (5th)

Qualys VMDR

Ranking in Vulnerability Management

2nd

Average Rating

8.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

IT Asset Management (4th), Configuration Management Databases (3rd), Container Security (12th), Risk-Based Vulnerability Management (3rd)

Mindshare comparison

As of December 2024, in the Vulnerability Management category, the mindshare of PortSwigger Burp Suite Enterprise Edition is 1.2%, down from 1.3% compared to the previous year. The mindshare of Qualys VMDR is 11.4%, down from 13.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Hasan Abufreiha

Cyber security enthusiast at a university with 51-200 employees

Used for web application auditing and security audits for web applications

I would advise users to limit Burp Suite usage to specific scenarios and applications. Users should use the solution as an expert testing tool instead of using it as a general scanner or for information gathering in general. The tool might be overwhelming initially for new users, but it will be easy after you get used to the UI, features, and options. PortSwigger Burp Suite Enterprise Edition has been doing an amazing job for years compared to other similar tools. Overall, I rate the solution an eight out of ten.

Read full review

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I like normal dynamic scanning, general web applications scanning, and vulnerability assessments."

"The initial setup is straightforward."

"The product's initial setup phase was super easy."

"The product is easy to use."

"The most valuable part of it was probably the ability to intercept and modify calls."

"Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition."

"The most valuable features of PortSwigger Burp Suite Enterprise Edition are the vast amount of options and ease of use. They frequently improve the solution every six months to a year. Additionally, if we want any more features we can upload a custom script to meet our needs."

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

More PortSwigger Burp Suite Enterprise Edition pros

"I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even if tags aren't made."

"Qualys VM's best features are vulnerability management and customizable scoring."

"Using this product, we now have a vulnerability management cycle wherein VMDR plays a major role."

"The best features of Qualys VMDR are its patch management capabilities and the ability to mitigate vulnerabilities automatically."

"The most valuable features of Qualys VM are its ability to do proper vulnerability assessment. It has a lot of updates for all the vulnerability databases from all over the globe. It's an amazing solution when it comes to the versatility of the features it has. Additionally, the reports are very good. It generates very detailed reports about the vulnerabilities inside the environment"

"The most valuable feature is the certificate management."

"There are many features. Its reliability, ease of installation, ease of use, and the richness of the information provided are the most valuable features."

"Performs automated, regular scans in the network."

More Qualys VMDR pros

Cons

"It would be better if the solution is cloud-based."

"The product needs to have the ability to evaluate more."

"The stability of the scans could be improved."

"From my personal experience, the solution's performance could be improved."

"Scalability could be better."

"There's definitely room for improvement. There are lots of false positives. Once I do the manual assessment, it comes as a false positive. They need to improve the Enterprise Edition, especially the part that gives false positives."

"The implementation of the solution is quite complicated and could be easier."

"The solution is a bit expensive."

More PortSwigger Burp Suite Enterprise Edition cons

"The tool needs to improve the adding assets and report generation features. I would like to see the policy scan of offline appliances in the product's future releases."

"I would like to see more accuracy in detections, better reporting capabilities, and better dashboard download capabilities."

"If AI features were integrated, it could enhance the capabilities significantly."

"One area for improvement is the simplification of the process to ignore certain vulnerabilities on specific devices."

"Sometimes the scanning can get overwhelmed and start to drag when a lot of users are trying to scan at once."

"There needs to be better documentation."

"It would be helpful to have features for better tracking, including options for adding relevant owners or supporting groups for each asset."

"It's not very user-friendly at times and requires in-depth understanding. So, a layman or someone new to Qualys won't be able to easily understand it. You need education to use the solution."

More Qualys VMDR cons

Pricing and Cost Advice

"For Professional, it's about $400 per year."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."

"The tool's pricing is reasonable and costs around 400 dollars per year."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

"Qualys is a pay-as-you-go model, so there's flexibility to the pricing."

"The pricing is very competitive."

"The solution is expensive."

"It is more expensive than other products on the market."

"The license is on a yearly basis."

"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."

"The solution is reasonably priced for the value it provides."

"The price is very reasonable."

More Qualys VMDR pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

824,067 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

13%

Government

Manufacturing Company

Educational Organization

36%

Computer Software Company

11%

Financial Services Firm

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about PortSwigger Burp Suite Enterprise Edition?

Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition.

See all answers

What is your experience regarding pricing and costs for PortSwigger Burp Suite Enterprise Edition?

For Enterprise, I'm not sure of the pricing. For Professional, it's about $400 per year. If you're using it as it should be used, the pricing is reasonable based on the benefits it provides.

See all answers

What needs improvement with PortSwigger Burp Suite Enterprise Edition?

Scalability could be better. It's primarily focused on dynamic application security testing but might require integration with another platform to handle larger environments efficiently.

See all answers

What is your primary use case for Qualys VM?

Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...

See all answers

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

See all answers

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.

See all answers

Comparisons

Acunetix vs PortSwigger Burp Suite Enterprise Edition

Compared 34% of the time

Tenable Nessus vs PortSwigger Burp Suite Enterprise Edition

Compared 11% of the time

Fortify WebInspect vs PortSwigger Burp Suite Enterprise Edition

Compared 11% of the time

Rapid7 Metasploit vs PortSwigger Burp Suite Enterprise Edition

Compared 7% of the time

AppCheck vs PortSwigger Burp Suite Enterprise Edition

Compared 3% of the time

More PortSwigger Burp Suite Enterprise Edition Competitors

Tenable Nessus vs Qualys VMDR

Compared 18% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 7% of the time

Wiz vs Qualys VMDR

Compared 5% of the time

More Qualys VMDR Competitors

Product Reports

Buyer's Guide

PortSwigger Burp Suite Enterprise Edition

November 2024

PortSwigger Burp Suite Enterprise Edition report

Download PortSwigger Burp Suite Enterprise Edition product report

Buyer's Guide

Qualys VMDR

December 2024

Download Qualys VMDR product report

Also Known As

No data available

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance

Learn More

PortSwigger

Qualys

Overview

Burp Suite Enterprise Edition is an automated web vulnerability scanner, designed to enable enterprises to scale security across their web portfolios and achieve DevSecOps. Automate trusted Burp scans, integrate web security testing with development, and free your application security to support software development.

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Sample Customers

Nasa, Disney, Dow Jones, Iberia Bank, IBM, Ernest and Young, Apple, Ryanair, Thyssenkrupp, Delivery Hero

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

Buyer's Guide

PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR

December 2024

Free Report: PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR

Find out what your peers are saying about PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR and other solutions. Updated: December 2024.

DOWNLOAD NOW

824,067 professionals have used our research since 2012.

See our PortSwigger Burp Suite Enterprise Edition vs. Qualys VMDR report.

See our list of best Vulnerability Management vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.