Qualys CyberSecurity Asset Management vs Skybox Security Suite comparison

Qualys and Tufin are both solutions in the Vulnerability Management category. Qualys is ranked #10 with an average rating of 9.1, while Tufin is ranked #41 with an average rating of 7.3. Qualys holds a 0.7% mindshare in VM, compared to Tufin’s 0.5% mindshare. Additionally, 100% of Qualys users are willing to recommend the solution, compared to 83% of Tufin users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 25, 2025

Skybox Security Suite and Qualys CyberSecurity Asset Management compete in the cybersecurity domain, each with unique advantages. Skybox is favored for its competitive pricing and excellent customer support, while Qualys is preferred for its sophisticated features.

Features:Skybox Security Suite offers comprehensive network security management, including network analytics, offline attack simulation, and firewall management. In contrast, Qualys CyberSecurity Asset Management excels in asset discovery, continuous monitoring, and automated updates for threat detection.

Room for Improvement:Skybox could enhance user interface intuitiveness, API integration flexibility, and scalability for small businesses. Qualys might improve its initial setup process, pricing transparency, and user training resources for better onboarding.

Ease of Deployment and Customer Service:Skybox provides flexible deployment options and robust customer service, ensuring smooth integration and customization. Qualys offers streamlined deployment with minimal configuration and reliable customer support, emphasizing efficiency.

Pricing and ROI:Skybox Security Suite is cost-effective with competitive pricing, offering excellent ROI with efficient management benefits. Qualys involves a higher setup cost but delivers significant long-term value through its robust asset management and feature set.

To learn more, read our detailed Qualys CyberSecurity Asset Management vs. Skybox Security Suite Report (Updated: April 2025).

Buyer's Guide

Qualys CyberSecurity Asset Management vs. Skybox Security Suite

April 2025

Download the complete report

Helped 848,396 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Zafran Security

Mindshare comparison

As of April 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 0.4%. The mindshare of Qualys CyberSecurity Asset Management is 0.7%, up from 0.1% compared to the previous year. The mindshare of Skybox Security Suite is 0.5%, down from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Israel Cavazos Landini

Associate Director IT Security Operations at Novartis

Weekly insights and risk analysis facilitate informed security decisions

I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.

Read full review

Revathi VeeraRaghavan

Information Security - Manager at Infosys

Provides comprehensive visibility and covers the complete attack surface

For some of the software, there was no life cycle or general information. We wanted them to give details in the database as and when the software comes. I raised a ticket for that, and after that, they updated the details for more than one million software. They should address the false positives generated in EASM. It is fetching assets that have Infosys as the keyword. They should fix that. When we click on the web application, it only shows potential web assets. The application details are not there. Overall, CSAM has matured a lot. These are the few enhancements that need to be done.

Read full review

NenadMijatovic

Director of Sales at S4E Serbia

Efficient in vulnerability management, stable and easy to use

Vulnerability management is the most valuable feature because it lets you focus on the most critical vulnerabilities. That's the important thing. Here in Serbia, there are not so many companies that have too many firewalls inside one company. So, they usually don't buy this model for Firewall Assurance unless there is some compliance. So you can prove that your firewalls are compliant. So, that model is not so important here in Serbia. It's for bigger companies. So, they usually buy network assurance to build the model of the network and vulnerability management to focus on the most important vulnerabilities. Moreover, Skybox can collect data for many vendors. From the endpoint protection vendors to the network equipment vendors to other security vendors. So, it supports more than one hundred vendors to collect data from them.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Zafran has become an indispensable tool in our cybersecurity arsenal."

"We are able to see the real risk of a vulnerability on our environment with our security tools."

"Zafran is an excellent tool."

"When you implement a dynamic tag using a query, you do not need to manually tag all the servers. It categorizes all the servers that come under that query. The tagging part is automatically done within a few minutes. It reduces the effort."

"Our favorite features are the tagging and the ability to quickly find assets in the portal."

"There are no stability issues, and I would rate it a ten out of ten."

"The end-of-life and end-of-service software and hardware are some of my favorite features."

"With Qualys CSAM, we can see which assets have critical application vulnerabilities. This feature helps us prioritize and address these vulnerabilities more efficiently."

"It provides most of the information needed regarding the assets, including the operating system and whether the assets are network devices or servers."

"The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments."

"Qualys CyberSecurity Asset Management has helped to improve the organization's security posture significantly."

More Qualys CyberSecurity Asset Management pros

"It's very supportive and very user-friendly."

"The most impressive feature is optimization and clean-up."

"Aside from Firewall Assurance, we are using Network Assurance and Change Manager for an overview of the whole network and for documenting requests and the recertification of the ruleset."

"It can be integrated with a vulnerability management solution. When a client comes, apart from pitching network and firewall change management, we are recommending having vulnerability management. So, rather than just having the audit of the firewall, they can integrate it with their vulnerability management solution, which could be Rapid7, Qualys, or any other solution. This provides them the most value out of the platform. That is the way we are approaching our customer base."

"The most valuable features are Firewall Assurance and Vulnerability Control."

"The most valuable feature is firewall management."

"We are currently working on rule review and compliance. The logging features are good."

"Skybox Security Suite is cost-effective."

More Skybox Security Suite pros

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."

"Further research and development are needed to enhance integration with other cloud agents and products, particularly improving communication with external products and vendors."

"The UI needs improvement as it can become overwhelming after prolonged use."

"Qualys could improve by enhancing its dynamic tagging and role-based access control features, and by refining its user interface for a more intuitive and efficient user experience."

"In my opinion, the area that needs improvement is the role-based access control (RBAC). The access privilege management needs to be more robust and streamlined to enhance user access management."

"They should address the false positives generated in EASM. It is fetching assets that have Infosys as the keyword. They should fix that."

"The deployment is somewhat complicated and could be made more user-friendly for most users. It is currently not user-friendly for all users. It is good but can be improved. It is a new product, and they are working on it."

"The Qualys CAPS service requires further exploration and improvement, particularly in its handling of protocols and reactivity with MAC and IP addresses for CAP agents."

"There can be further simplification to reduce the overall noise and provide ESAM-related data."

More Qualys CyberSecurity Asset Management cons

"There is room for improvement in the technical support."

"The support could be improved."

"The solution needs to add more automation and orchestration capabilities. Those features would make the solution much stronger."

"The primary room for improvement would be to enable a web interface, which is not something which is there in the product. This is supposed to have come a year, a year and a half ago, but still has failed to come out. It still needs a client application to be installed on a workstation to be able to access that server and then run these reports. So I cannot extend that access to anybody. It has to be one administrator all the time. So unlike a web interface, where you can give multiple users simultaneous access and generate the various reports, that isn't a possibility at the moment."

"The setup documentation needs a lot of improvement."

"The most recent update was not tested with all of the vendors before it was released, so some of the features are misbehaving."

"The dashboard's UI is not interesting; it is quite normal. It would be better if something more attractive or similar useful information found in AlgoSec was available."

"Modifications and the deletion of existing policies are currently unavailable."

More Skybox Security Suite cons

Pricing and Cost Advice

Information not available

"The pricing for Qualys Cybersecurity Asset Management is reasonable, with an annual subscription costing around $1,000 per year or a monthly subscription starting at approximately $72 per month, depending on the specific package and features included."

"The pricing is fair. I would love to see the price come down a little bit, but we do get a lot of value out of it. We are squeezing every ounce of value we can out of the tool."

"Qualys CyberSecurity Asset Management can be expensive, especially if we already have VMDR."

"It is cost-effective because, in a single tool, we are getting everything. All the solutions come in a single license or price."

"The pricing is market-competitive."

"Qualys is competitively priced for its features. Its pricing is suitable for large organizations with more than 4,000 assets, but for smaller organizations with few assets, such as banks, the costs might be high. They should come up with packages that are suitable for small organizations."

"Qualys offers excellent value for money."

"The pricing is reasonable relative to the features provided, as it collects all module data and operates as a main, centralized inventory, making it a cost-effective solution."

More Qualys CyberSecurity Asset Management pricing and cost advice

"The software is expensive. I rate its pricing an eight out of ten."

"The product's pricing is excellent value. In terms of licensing, make sure you understand your network components, all your hops through your network, thoroughly, before you decide on the total cost. If you want to do point-to-point flow analysis and such, you need to have the configuration of all the devices in between point A and point B. A lot of people don't realize all their network components until they start using this product."

"It's expensive."

"The price of the Skybox Security Suite can be expensive."

"I rate the pricing two on a scale of one to ten, where one is very expensive, and ten is cost-effective."

"The pricing has increased exorbitantly in the last few years, so now it is questionable. Now, it makes me want to review other products."

"Skybox comes with extra licenses and has a change management license. The licenses are expensive, but they come with extra value."

"Currently, the licensing costs me about $300 USD for the year. This is a huge amount for my environment."

More Skybox Security Suite pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

848,396 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Financial Services Firm

11%

Manufacturing Company

Retailer

Computer Software Company

22%

Financial Services Firm

13%

Government

Retailer

Financial Services Firm

18%

Computer Software Company

17%

Manufacturing Company

10%

Energy/Utilities Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?

I find that the pricing for Zafran aligns well with the comprehensive features it offers. The asset and user-based li...

See all answers

What needs improvement with Zafran Security?

While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even ...

See all answers

What is your primary use case for Zafran Security?

Our primary use case for Zafran involves leveraging it to enhance our vulnerability risk scoring methodology. In toda...

See all answers

What is your experience regarding pricing and costs for Qualys CyberSecurity Asset Management?

The pricing is reasonable relative to the features provided, as it collects all module data and operates as a main, c...

See all answers

What needs improvement with Qualys CyberSecurity Asset Management?

The deployment is somewhat complicated and could be made more user-friendly for most users. It is currently not user-...

See all answers

What is your primary use case for Qualys CyberSecurity Asset Management?

We use it to identify all our assets, including those on our premises, cloud, and remote environments. It continuousl...

See all answers

What do you like most about Skybox Security Suite?

Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identif...

See all answers

What is your experience regarding pricing and costs for Skybox Security Suite?

Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approxim...

See all answers

What needs improvement with Skybox Security Suite?

There is room for improvement in the product's user interface. It could be more user-friendly.

See all answers

Comparisons

Wiz Code vs Zafran Security

Compared 53% of the time

Vulcan Cyber vs Zafran Security

Compared 22% of the time

ServiceNow Security Operations vs Zafran Security

Compared 15% of the time

Tenable Vulnerability Management vs Zafran Security

Compared 9% of the time

More Zafran Security Competitors

Amazon Inspector vs Qualys CyberSecurity Asset Management

Compared 15% of the time

Armis vs Qualys CyberSecurity Asset Management

Compared 13% of the time

Microsoft Defender External Attack Surface Management vs Qualys CyberSecurity Asset Management

Compared 11% of the time

CrowdStrike Falcon vs Qualys CyberSecurity Asset Management

Compared 9% of the time

Axonius vs Qualys CyberSecurity Asset Management

Compared 7% of the time

More Qualys CyberSecurity Asset Management Competitors

AlgoSec vs Skybox Security Suite

Compared 32% of the time

Tufin Orchestration Suite vs Skybox Security Suite

Compared 29% of the time

FireMon Security Manager vs Skybox Security Suite

Compared 14% of the time

RedSeal vs Skybox Security Suite

Compared 5% of the time

Qualys VMDR vs Skybox Security Suite

Compared 4% of the time

More Skybox Security Suite Competitors

Product Reports

Buyer's Guide

Continuous Threat Exposure Management (CTEM)

March 2025

Download Zafran Security product report

Buyer's Guide

Qualys CyberSecurity Asset Management

April 2025

Qualys CyberSecurity Asset Management report

Download Qualys CyberSecurity Asset Management product report

Buyer's Guide

Skybox Security Suite

March 2025

Download Skybox Security Suite product report

Overview

Zafran Security integrates with existing security tools to identify and mitigate vulnerabilities effectively, proving that most critical vulnerabilities are not exploitable, optimizing threat management.

Zafran Security introduces an innovative operating model for managing security threats and vulnerabilities. By leveraging the threat exposure management platform, it pinpoints and prioritizes exploitable vulnerabilities, reducing risk through immediate remediation. This platform enhances your hybrid cloud security by normalizing vulnerability signals and integrating specific IT context data, such as CVE runtime presence and internet asset reachability, into its analysis. No longer reliant on patch windows, Zafran Security allows you to manage risks actively.

What are the key features of Zafran Security?

Threat Exposure Management: Utilizes existing tools to prioritize vulnerabilities and manage threats.
Integrative Analysis: Combines security data with IT context for precise vulnerability management.
Real-time Risk Reduction: Enables immediate risk management without waiting for patches.
Hybrid Cloud Compatibility: Functions across diverse cloud environments for comprehensive security.

What benefits can users expect from Zafran Security?

Improved Security: Enhances protection by efficiently identifying and mitigating risks.
Cost Efficiency: Reduces unnecessary patching expenses by confirming non-exploitable vulnerabilities.
Time Savings: Frees developers to focus on root causes by handling immediate threats.
Comprehensive Insight: Offers a holistic view of security threats and vulnerabilities.

In industries where security is paramount, such as finance and healthcare, Zafran Security provides invaluable protection by ensuring that only exploitable vulnerabilities are addressed. It allows entities to maintain robust security measures while allocating resources efficiently, fitting seamlessly into existing security strategies.

Zafran Security

Qualys CyberSecurity Asset Management provides advanced real-time asset visibility, dynamic tagging, and External Attack Surface Management. It streamlines asset discovery and management using cloud agents and IP-based scanning, enhancing risk management and software lifecycle tracking.

Qualys CyberSecurity Asset Management offers a comprehensive solution for managing asset inventories and tracking software lifecycle states. It facilitates network visibility and supports zero-day vulnerability solutions, enhancing security posture through efficient monitoring. Users benefit from its cloud-based interface, which provides in-depth asset configurations and insights. Key features include automated vulnerability scanning and unauthorized software management, reducing manual efforts. The platform also emphasizes the importance of timely remediation and ongoing risk mitigation across multiple environments. Despite its strengths, users note the need for enhanced integration with additional CMDBs beyond ServiceNow, as well as cost efficiency improvements. Requests also include better report customization, more scan control, and a simplified UI.

What are the key features of Qualys CyberSecurity Asset Management?

Real-time Visibility: Offers continuous insight into asset status and condition.
Dynamic Tagging: Allows for flexible organization and assessment of assets.
External Attack Surface Management: Identifies potential threats from external sources.
Automated Vulnerability Scanning: Reduces manual scanning efforts and identifies vulnerabilities instantly.
Unauthorized Software Management: Detects and manages software not approved for use.
Asset Purge Rule: Automates the removal of obsolete assets from the inventory.

What benefits should users look for in reviews?

Enhanced Security Posture: Gains stronger defense through effective asset monitoring.
Efficient Risk Management: Identifies threats quickly, enabling timely resolutions.
Improved Compliance: Assists in meeting industry standards and regulations.
Reduced Manual Effort: Automates repetitive tasks, saving time and resources.
Comprehensive Insight: Provides detailed data for informed decision making.

In industries like finance, healthcare, and manufacturing, Qualys CyberSecurity Asset Management enhances asset control by offering visibility into hardware and software configurations. It aids in maintaining security compliance and identifying unauthorized software, crucial for sectors with strict regulatory requirements.

Qualys

Skybox Security Suite provides comprehensive tools for network and firewall compliance, vulnerability management, and change management, with a focus on risk reduction and network optimization.

Skybox Security Suite supports over 130 vendors with massive scalability and seamless integration, notably with Nessus and Qualys. Its features include network path analysis and offline attack simulation, which enhance management effectiveness. Despite its robust offering, improvements are needed in its UI, web interface, reporting detail, and customization. Automation, orchestration, and device policy provisioning require better support, and integration with tools like Rapid7 could be improved. Enhancements in firewall configuration checks, cloud connectivity, pricing, and marketing awareness are also called for, alongside a transition from Java GUI to a consistent web-based system.

What Are Key Features of Skybox Security Suite?

Network Assurance: Enhances visibility and optimization of network paths.
Firewall Assurance: Facilitates firewall rule set audits for compliance.
Vulnerability Management: Offers path detection and risk prioritization.
Compliance Management: Ensures adherence to standards like PCI.
Change Management: Simplifies management across extensive infrastructures.

What Benefits and ROI Can Users Expect?

Scalability: Supports numerous vendors and large-scale deployments.
Integration: Seamlessly connects with tools like Nessus and Qualys.
Risk Reduction: Improves security across network infrastructures.
Simplified Management: User-friendly interface and reporting tools enhance usability.
Network Optimization: Streamlines processes and improves performance.

Skybox Security Suite is commonly used in industries requiring strict compliance like finance and healthcare. Firms employ it for firewall audits, enhancing network visibility, and managing configurations against standards such as PCI, ensuring security and policy compliance across expansive networks.

Tufin

Sample Customers

Information Not Available

ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson

Buyer's Guide

Qualys CyberSecurity Asset Management vs. Skybox Security Suite

April 2025

Free Report: Qualys CyberSecurity Asset Management vs. Skybox Security Suite

Find out what your peers are saying about Qualys CyberSecurity Asset Management vs. Skybox Security Suite and other solutions. Updated: April 2025.

DOWNLOAD NOW

848,396 professionals have used our research since 2012.

See our Qualys CyberSecurity Asset Management vs. Skybox Security Suite report.

See our list of best Vulnerability Management vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.