Try our new research platform with insights from 80,000+ expert users

Qualys VMDR vs Rapid7 Metasploit comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 29, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Customer Service

Sentiment score
6.3
Qualys VMDR's customer service is praised for responsiveness and expertise, but some users desire faster resolution and more comprehensive support.
No sentiment score available
Rapid7 Metasploit's support is inconsistent, with mixed reviews on effectiveness and lacking official support for the community edition.
The technical support provided by Qualys is pretty good.
The response time takes a while.
 

Room For Improvement

Sentiment score
5.0
Qualys VMDR needs improvements in reporting, user interface, false positives, asset management, integration, support, analytics, and pricing.
No sentiment score available
Enhance Rapid7 Metasploit by updating exploits, reducing resource usage, improving GUI, and adding user-friendly features and training.
It does not automate patching unless the patch management module is purchased separately.
The response time of technical support takes a while.
 

Scalability Issues

Sentiment score
8.0
Qualys VMDR is praised for its scalable cloud architecture, efficiently managing assets and deployments across various organizational sizes.
No sentiment score available
Rapid7 Metasploit's scalability receives mixed feedback, with concerns about automation and scalability, though some find it sufficient.
Scalability depends on the license and the number of assets being monitored.
 

Setup Cost

Sentiment score
4.5
Qualys VMDR is customizable and comprehensive but seen as costly, especially for smaller companies and mid-sized programs.
No sentiment score available
Enterprise users have mixed views on Rapid7 Metasploit pricing, with concerns over affordability versus value in licensing costs.
I would rate the pricing between seven to eight out of ten.
 

Stability Issues

Sentiment score
8.0
Qualys VMDR is highly stable with minimal issues, praised for reliability, although occasional slowness occurs with large data scans.
No sentiment score available
Rapid7 Metasploit's stability is improved, rated highly by users, but some report varying experiences with recent updates.
 

Valuable Features

Sentiment score
8.1
Qualys VMDR offers robust vulnerability management, customization, integration, and real-time updates, praised for ease of use and scalability.
Sentiment score
7.6
Rapid7 Metasploit provides extensive penetration testing tools, automation, and scalability with unique direct exploitation across multiple operating systems.
Qualys VMDR offers a one-stop solution for monitoring and reporting.
I like the automated report generation and vulnerability report generation.
 

Categories and Ranking

Qualys VMDR
Ranking in Vulnerability Management
2nd
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
91
Ranking in other categories
IT Asset Management (4th), Configuration Management Databases (3rd), Container Security (10th), Risk-Based Vulnerability Management (3rd)
Rapid7 Metasploit
Ranking in Vulnerability Management
19th
Average Rating
7.6
Reviews Sentiment
7.6
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2024, in the Vulnerability Management category, the mindshare of Qualys VMDR is 12.2%, down from 13.6% compared to the previous year. The mindshare of Rapid7 Metasploit is 1.9%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management
 

Featured Reviews

Harold Jensen - PeerSpot reviewer
Good visibility but expensive and needs better support
Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.
Aqeel Junaid - PeerSpot reviewer
Helps find vulnerabilities in a system to determine whether the system needs to be upgraded
The solution's exploit development functionality was easy to use and had all the scenarios I could use to run my security assessment. Since the solution has been updated regarding new malware, it gives data protection for security professionals. Rapid7 Metasploit is a good exploit tool, and users need to know what they're doing while using the solution. The solution provides perfect effectiveness in simulating real-world attacks for training purposes. Overall, I rate the solution a nine out of ten.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
816,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
35%
Computer Software Company
11%
Financial Services Firm
11%
Manufacturing Company
6%
Computer Software Company
18%
Financial Services Firm
10%
Manufacturing Company
10%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your primary use case for Qualys VM?
Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...
What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...
What is your experience regarding pricing and costs for Qualys VMDR?
I am not aware of the actual cost or pricing as it is managed by the client.
What do you like most about Rapid7 Metasploit?
I use Rapid7 Metasploit for payload generation and Post-Exploitation.
What needs improvement with Rapid7 Metasploit?
Rapid7 Metasploit could be made easier for new users to learn.
 

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance
Metasploit
 

Learn More

 

Overview

 

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
City of Corpus Christi, Diebold, Lumenate, Nebraska Public Power District, Prairie North Regional Health, Apptio, Automation Direct, Bob's Stores, Cardinal Innovations Healthcare Solutions, Carnegie Mellon University
Find out what your peers are saying about Qualys VMDR vs. Rapid7 Metasploit and other solutions. Updated: October 2024.
816,406 professionals have used our research since 2012.