Qualys VMDR vs RedSeal comparison

Read 9 RedSeal reviews

56 Views
36 Comparison Views

100% willing to recommend

Qualys VMDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

Qualys VMDR and RedSeal are competitive solutions in the network security category. Qualys VMDR seems to have the upper hand in comprehensive vulnerability management, while RedSeal has the edge in network visibility and risk assessment.

Features: Qualys VMDR offers continuous monitoring, vulnerability scanning, and automated remediation workflows, making it versatile for vulnerability management. It also provides threat intelligence integration and report generation. RedSeal features network mapping, configuration management, and a digital resilience score, proving invaluable for understanding network infrastructure and compliance verification.

Room for Improvement: Qualys VMDR could improve in the area of ease of use for less technical users and dashboard customization. Also, its integration with other security tools sometimes lacks depth. RedSeal's room for improvement includes simplifying its initial setup process and integration with third-party tools, and providing more real-time visibility updates.

Ease of Deployment and Customer Service: Qualys VMDR benefits from a straightforward cloud-based deployment, easing setup and integration. Its customer service is effective for remote operations. RedSeal may require complex initial integration due to network-specific settings but is supported by strong after-deployment services to solve configuration challenges.

Pricing and ROI: Qualys VMDR works on a subscription model, offering good value given its comprehensive coverage, leading to a strong ROI. RedSeal's higher initial setup costs might be offset by the ROI gained through its network insights and proactive risk management, presenting a higher upfront but potentially greater long-term value.

To learn more, read our detailed Qualys VMDR vs. RedSeal Report (Updated: December 2024).

Download the complete report

Qualys VMDR vs. RedSeal

December 2024

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys VMDR

Ranking in Risk-Based Vulnerability Management

3rd

Average Rating

8.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

IT Asset Management (4th), Vulnerability Management (2nd), Configuration Management Databases (2nd), Container Security (12th)

RedSeal

Ranking in Risk-Based Vulnerability Management

19th

Average Rating

8.2

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Featured Reviews

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

Sajid Mukhtar

Associate Director Security at a outsourcing company with 10,001+ employees

Provides a graphical overview of our network and is easy to deploy, but needs a user-friendly interface and a feature for compliance audit policy

Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It gives you a lot of options, and it integrates with our ServiceNow for ticketing and all."

"It's very configurable to adjust impact to systems."

"I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even if tags aren't made."

"This solution gives us insight into our environment and improves our security. It helps us to maintain a good patching system whereby we know that XYZ is vulnerable within the system."

"The most valuable features of Qualys VM are its ability to do proper vulnerability assessment. It has a lot of updates for all the vulnerability databases from all over the globe. It's an amazing solution when it comes to the versatility of the features it has. Additionally, the reports are very good. It generates very detailed reports about the vulnerabilities inside the environment"

"There are fewer false positives when using this solution."

"The reporting is fine."

"Technical support is fantastic."

More Qualys VMDR pros

"This is the only solution in the world that gives you a digital resilience score."

"RedSeal has different modules, such as the Analyzer module, which can be leveraged."

"The most valuable features are network mapping and configuration."

"RedSeal integrates the network and gives us a visual or graphical overview of our network. If an organization is geographically dispersed, for instance, with one office in Canada and one office in the Philippines, the whole network, including all devices, is integrated into RedSeal, and you can see from where the traffic is going in and out."

Cons

"There seems to be a lack of easy onboarding into Qualys."

"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."

"The reporting and the GUI need improvements."

"Endpoint stability and fault resolution could be improved."

"It would be nice to have an all-in-one solution that was automated and could handle the scanning and reports as well as the patching and updating."

"Qualys VM's scanner doesn't pick up every vulnerability, so we have to use multiple scanners to cover that gap."

"It's not very user-friendly at times and requires in-depth understanding. So, a layman or someone new to Qualys won't be able to easily understand it. You need education to use the solution."

"From the application security perspective, Qualys has a way to go."

More Qualys VMDR cons

"Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus."

"The dashboard should be improved to make correlating data easier to do."

"One of the areas of concern is the GUI. It is important to our customers that the GUI looks beautiful. It's a Java Client, so you have a Java dependency."

"There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal."

Pricing and Cost Advice

"I used to work there, so I never paid for the product. As an employee, we get a lifetime license for personal use, and that's what I'm using. It is a comprehensive platform, so there is a lot more to it. There could be other solutions that are probably a little bit cheaper, but it depends on what people need. Different people have different needs. It offers many things on the same platform. If you add all the things up, it should be cheaper, but I have not done any analysis specifically."

"The solution is expensive."

"The price is very reasonable."

"It is a high cost product. Compared to the other solutions, it is around 15 to 20% higher in cost."

"There are no additional fees in addition to the standard licensing fees."

"It is more expensive than other products on the market."

"There is a license for the use of this solution. We pay annually instead of monthly to receive a better discount on the price."

"The solution is costly."

More Qualys VMDR pricing and cost advice

"The pricing is based on the number of endpoints and devices, and we have seen it range from mid-five figures to low six figures."

See which vendors are best for you

Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

36%

Financial Services Firm

10%

Computer Software Company

10%

Manufacturing Company

Government

21%

Computer Software Company

13%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your primary use case for Qualys VM?

Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.

What is your experience regarding pricing and costs for RedSeal?

The pricing of RedSeal is competitive.

What needs improvement with RedSeal?

There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal.

What is your primary use case for RedSeal?

The primary use cases for RedSeal are lifecycle management, vulnerabilities, and change management. Customers might look up or use these solutions for these areas.

Tenable Nessus vs Qualys VMDR

Comparisons

Compared 18% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 7% of the time

Wiz vs Qualys VMDR

Compared 6% of the time

More Qualys VMDR Competitors

Skybox Security Suite vs RedSeal

Compared 20% of the time

Ekahau Site Survey vs RedSeal

Compared 20% of the time

FireMon Security Manager vs RedSeal

Compared 17% of the time

AlgoSec vs RedSeal

Compared 17% of the time

iBwave Wi-Fi vs RedSeal

Compared 15% of the time

More RedSeal Competitors

Product Reports

Download Qualys VMDR product report

Qualys VMDR

January 2025

Download RedSeal product report

January 2025

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance

No data available

Learn More

Qualys

Overview

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

RedSeal’s network modeling and risk scoring platform builds an accurate, up-to-date model of an organization’s entire, as-built network to visualize access paths, prioritize what to fix, so you can target existing cybersecurity resources to protect your most valuable assets. With RedSeal’s Digital Resilience Score, decision makers can see the security status and benchmark progress toward digital resilience.

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

United States Postal Service, Pacific Gas and Electric Co., Interval International