Qualys VMDR vs Skybox Security Suite comparison

Qualys and Tufin are both solutions in the Vulnerability Management category. Qualys is ranked #3 with an average rating of 8.2, while Tufin is ranked #44 with an average rating of 7.3. Qualys holds a 8.2% mindshare in VM, compared to Tufin’s 0.4% mindshare. Additionally, 94% of Qualys users are willing to recommend the solution, compared to 82% of Tufin users who would recommend it.

Qualys VMDR

Read 93 Qualys VMDR reviews

11,975 Views
9,005 Comparison Views

94% willing to recommend

Skybox Security Suite

Read 35 Skybox Security Suite reviews

597 Views
437 Comparison Views

82% willing to recommend

Qualys VMDR

Skybox Security Suite

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 25, 2025

In the vulnerability management market, Qualys VMDR and Skybox Security Suite are key competitors. Qualys VMDR appears to have the upper hand due to its comprehensive suite of features that enhance security and integration capabilities.

Features: Qualys VMDR is highly regarded for its continuous endpoint monitoring, seamless integration, and scalable cloud deployment. It offers real-time asset management and a robust dashboard for constant oversight. In contrast, Skybox Security Suite stands out with its network assurance capabilities, comprehensive firewall management, and ability to integrate with multiple vulnerability management tools, providing extensive network visibility and adaptability.

Room for Improvement: Qualys VMDR users suggest enhancing its reporting features, making the user interface more intuitive, and reducing its cloud dependency costs for smaller enterprises. Skybox Security Suite is encouraged to improve its user interface, enhance integration within its modules, and expand its automation capabilities to boost usability.

Ease of Deployment and Customer Service: Qualys VMDR is praised for its adaptability to various cloud environments and flexibility in deployment options. Its customer service is generally satisfactory, though there are some reports of occasional tech support delays. Skybox Security Suite is primarily deployed on-premises, which might limit flexibility, but its customer service is considered efficient and responsive.

Pricing and ROI: Qualys VMDR is perceived as a premium solution with high pricing, especially challenging for smaller organizations, but it's seen as a worthwhile investment due to its effective vulnerability management, offering significant ROI through enhanced security. Skybox Security Suite is similarly high-priced, particularly for mid-sized firms, but users acknowledge its robust capabilities in network and firewall assurance, appreciating the ROI in terms of risk reduction and efficiency enhancement.

To learn more, read our detailed Qualys VMDR vs. Skybox Security Suite Report (Updated: January 2025).

Buyer's Guide

Qualys VMDR vs. Skybox Security Suite

January 2025

Download the complete report

Helped 841,004 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys VMDR

Ranking in Vulnerability Management

3rd

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

IT Asset Management (5th), Configuration Management Databases (2nd), Container Security (11th), Risk-Based Vulnerability Management (2nd)

Skybox Security Suite

Ranking in Vulnerability Management

44th

Average Rating

7.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Firewall Security Management (7th)

Mindshare comparison

As of March 2025, in the Vulnerability Management category, the mindshare of Qualys VMDR is 8.2%, down from 11.3% compared to the previous year. The mindshare of Skybox Security Suite is 0.4%, down from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

NenadMijatovic

Director of Sales at S4E Serbia

Efficient in vulnerability management, stable and easy to use

Vulnerability management is the most valuable feature because it lets you focus on the most critical vulnerabilities. That's the important thing. Here in Serbia, there are not so many companies that have too many firewalls inside one company. So, they usually don't buy this model for Firewall Assurance unless there is some compliance. So you can prove that your firewalls are compliant. So, that model is not so important here in Serbia. It's for bigger companies. So, they usually buy network assurance to build the model of the network and vulnerability management to focus on the most important vulnerabilities. Moreover, Skybox can collect data for many vendors. From the endpoint protection vendors to the network equipment vendors to other security vendors. So, it supports more than one hundred vendors to collect data from them.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's also highly customizable, allowing us to tailor it to our needs."

"I like the automated report generation and vulnerability report generation."

"This is one of the best products I have worked with so far. I like the power of Qualys, and it's a better solution because you can scan a compact file, a BIT file, or batch files. The product already knows what's happening inside, and you don't need to expand the package. Tenable will do the same thing, but you need to have a package issuance claim. With Qualys, we can immediately understand the file, even a compact file. If there's some kind of discovery or incident, you will know what happened in the environment."

"It is a simple solution that makes scanning easy. You just give it a scheduled task, and it will do everything for you."

"I am impressed with the VMDR feature."

"Using this product, we now have a vulnerability management cycle wherein VMDR plays a major role."

"Qualys VMDR provides a real-time response and reporting feature, which is excellent."

"The most recent is VMDR, which provides a comprehensive overview of how to detect, patch, and remediate specific vulnerabilities."

More Qualys VMDR pros

"Key features for us include the firewall change audit every week. Also, being able to track firewall ACL usage, so that we can produce semiannual reports on ACL usage and shadowed and redundant rules on the firewall."

"It shows me a client's or an organization's entire network. I can see everything."

"Security review is the most important feature, because it offers a single pane of glass to analyze multiple firewalls."

"The solution's most valuable and unique assets are the vulnerability management and change management solutions because they identify mistakes in the network before implementation which reduces risks."

"We are currently working on rule review and compliance. The logging features are good."

"Correlates logs and threats and prioritizes; provides network maps;p provides change result context and resulting vulnerability."

"The revalidation and policy recertifications are most valuable."

"It's very supportive and very user-friendly."

More Skybox Security Suite pros

Cons

"Support could be improved since the response can be slow."

"What we have found is that the solution is not closely tied with the patch management. It is okay with newer ones, like Windows 10 machines; it gives the correct patch. But for Windows 7 or Windows Server 2008, it does not give us the correct patch so we have to manually identify the patches. This is a major problem."

"Improve the user interface."

"It's not very user-friendly at times and requires in-depth understanding. So, a layman or someone new to Qualys won't be able to easily understand it. You need education to use the solution."

"They're still evolving their platform in terms of reporting capabilities."

"Improve the API speed."

"It's quite complex on the way it is set up, so it takes a fair bit of time in order to get your head around it in order to deploy it. Once you've deployed it, then you're never confident on the versions of the browsers and the SSL certificates, etc. You have to always go back into Qualys and check."

"The response time of technical support takes a while."

More Qualys VMDR cons

"The solution needs to add more automation and orchestration capabilities. Those features would make the solution much stronger."

"There is room for improvement in the technical support."

"The solution needs improvement in firewall configuration checks. I would also like to see more configuration checks for Forcepoint and for other non-supported firewalls."

"The Network Assurance, which helps to create the network model, is not so rich."

"Skybox should improve their UX features by making them easier to use."

"The primary room for improvement would be to enable a web interface, which is not something which is there in the product. This is supposed to have come a year, a year and a half ago, but still has failed to come out. It still needs a client application to be installed on a workstation to be able to access that server and then run these reports. So I cannot extend that access to anybody. It has to be one administrator all the time. So unlike a web interface, where you can give multiple users simultaneous access and generate the various reports, that isn't a possibility at the moment."

"Change Manager can be improved. If they can improve Change Manager so that whatever we want to do on a firewall, we are able to do it through Change Manager, it will be helpful for us. Whenever we are doing a change, it only does them at an L3 and L4 level, but all the firewalls are at the application layer. So, whatever needs to be done on the firewall, we aren't able to get it done through Change Manager. Currently, this functionality is not there because of which we are sometimes losing customers. I can create a role on Layer 3, Layer 4, but when it comes to the application layer, such as configuring and defining URLs or other things at the application level, it can't be done through Change Manager. Customers demand that they should be able to do everything through Change Manager. They don't want to do it through some other mechanism to accomplish their complete change management policy. They don't want to use a firewall manager because sometimes, they don't have any manager. They ask if they can use our solution so that a manager is not required. If Change Manager can do all the management automatically without involving any other manager, it will be great. They can also provide better integration with other managers so that everything can be done through a central point."

"The price could be cheaper."

More Skybox Security Suite cons

Pricing and Cost Advice

"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."

"The pricing is very competitive."

"We do see over $100,000 in terms of price, for mid-size programs. You likely will pay more than $100,000 without any discount. It is a bit pricey."

"The price is very reasonable."

"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."

"Qualys VM is reasonably priced."

"It is more expensive than other products on the market."

"Qualys VM is quite expensive. It's a subscription-based license, and it's yearly. Right now, it's open for me, and I don't have any limitations or caps on the licenses. They are seeing if the product is viable for 4500 users. I can add as much as I want, and at the end of the subscription, they'll let me know how many licenses were actually used and bill me accordingly. On a scale from one to five, I would give their pricing a three. It's still expensive."

More Qualys VMDR pricing and cost advice

"I think the price is fair."

"Currently, the licensing costs me about $300 USD for the year. This is a huge amount for my environment."

"The pricing has increased exorbitantly in the last few years, so now it is questionable. Now, it makes me want to review other products."

"The product's pricing is excellent value. In terms of licensing, make sure you understand your network components, all your hops through your network, thoroughly, before you decide on the total cost. If you want to do point-to-point flow analysis and such, you need to have the configuration of all the devices in between point A and point B. A lot of people don't realize all their network components until they start using this product."

"The pricing is high, and the licensing model needs more flexibility."

"It's expensive."

"I've seen the pricing of every solution on the market. When you compare apples to apples, where Skybox becomes exceedingly expensive is if you look at it compared to something like FireMon that only does a fraction of what Skybox does. But if you include everything that Skybox does, it becomes way more expensive than the competition, but you're also not comparing apples to apples. If you look at FireMon, and you look at like just the firewall assurance piece, they are fairly comparable and, actually, Skybox comes in a little bit cheaper in some cases, depending on which product you're looking at."

"I rate the pricing two on a scale of one to ten, where one is very expensive, and ten is cost-effective."

More Skybox Security Suite pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

841,004 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

37%

Financial Services Firm

10%

Computer Software Company

10%

Manufacturing Company

Computer Software Company

18%

Financial Services Firm

17%

Manufacturing Company

11%

Energy/Utilities Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

See all answers

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.

See all answers

What needs improvement with Qualys VMDR?

Regarding improvement, compliance features haven't been utilized much. I anticipate more benefits in this area in the future. Integrating other teams, such as GRV, with Qualys would be very benefic...

See all answers

What do you like most about Skybox Security Suite?

Overall, the tool has helped us reduce risks. If any step is missing, it's easier for my team or engineers to identify it. The tool provides accurate recommendations based on the data. Its integrat...

See all answers

What is your experience regarding pricing and costs for Skybox Security Suite?

Skybox Security Suite has indeed helped us reduce costs. The prices of AlgoSec and Skybox Security Suite are approximately 50 percent different. The tool may require special vendor support from abr...

See all answers

What needs improvement with Skybox Security Suite?

There is room for improvement in the product's user interface. It could be more user-friendly.

See all answers

Comparisons

Tenable Nessus vs Qualys VMDR

Compared 16% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 8% of the time

Tenable Security Center vs Qualys VMDR

Compared 6% of the time

Wiz vs Qualys VMDR

Compared 6% of the time

More Qualys VMDR Competitors

AlgoSec vs Skybox Security Suite

Compared 33% of the time

Tufin Orchestration Suite vs Skybox Security Suite

Compared 29% of the time

FireMon Security Manager vs Skybox Security Suite

Compared 14% of the time

RedSeal vs Skybox Security Suite

Compared 5% of the time

ManageEngine Firewall Analyzer vs Skybox Security Suite

Compared 2% of the time

More Skybox Security Suite Competitors

Product Reports

Buyer's Guide

Qualys VMDR

February 2025

Download Qualys VMDR product report

Buyer's Guide

Skybox Security Suite

February 2025

Download Skybox Security Suite product report

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security

No data available

Overview

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Qualys

Skybox Security Suite provides comprehensive tools for network and firewall compliance, vulnerability management, and change management, with a focus on risk reduction and network optimization.

Skybox Security Suite supports over 130 vendors with massive scalability and seamless integration, notably with Nessus and Qualys. Its features include network path analysis and offline attack simulation, which enhance management effectiveness. Despite its robust offering, improvements are needed in its UI, web interface, reporting detail, and customization. Automation, orchestration, and device policy provisioning require better support, and integration with tools like Rapid7 could be improved. Enhancements in firewall configuration checks, cloud connectivity, pricing, and marketing awareness are also called for, alongside a transition from Java GUI to a consistent web-based system.

What Are Key Features of Skybox Security Suite?

Network Assurance: Enhances visibility and optimization of network paths.
Firewall Assurance: Facilitates firewall rule set audits for compliance.
Vulnerability Management: Offers path detection and risk prioritization.
Compliance Management: Ensures adherence to standards like PCI.
Change Management: Simplifies management across extensive infrastructures.

What Benefits and ROI Can Users Expect?

Scalability: Supports numerous vendors and large-scale deployments.
Integration: Seamlessly connects with tools like Nessus and Qualys.
Risk Reduction: Improves security across network infrastructures.
Simplified Management: User-friendly interface and reporting tools enhance usability.
Network Optimization: Streamlines processes and improves performance.

Skybox Security Suite is commonly used in industries requiring strict compliance like finance and healthcare. Firms employ it for firewall audits, enhancing network visibility, and managing configurations against standards such as PCI, ensuring security and policy compliance across expansive networks.

Tufin

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

ADP, Blue Cross Blue Shield, BT, USAID, Delta Dental, EDF Energy, EMC, HSBC, Johnson & Johnson

Buyer's Guide

Qualys VMDR vs. Skybox Security Suite

January 2025

Free Report: Qualys VMDR vs. Skybox Security Suite

Find out what your peers are saying about Qualys VMDR vs. Skybox Security Suite and other solutions. Updated: January 2025.

DOWNLOAD NOW

841,004 professionals have used our research since 2012.

See our Qualys VMDR vs. Skybox Security Suite report.

See our list of best Vulnerability Management vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.