Qualys VMDR vs RedSeal comparison

Read 9 RedSeal reviews

56 Views
36 Comparison Views

100% willing to recommend

Qualys VMDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 29, 2024

Qualys VMDR and RedSeal are two prominent cybersecurity solutions. Qualys VMDR seems to have the upper hand in terms of pricing and ease of deployment.

Features: Qualys VMDR offers real-time threat detection, streamlined vulnerability management, and efficient threat detection. RedSeal provides comprehensive network mapping, robust risk assessment capabilities, and extensive network analysis tools.

Room for Improvement: Qualys VMDR needs improvements in reporting capabilities, better integration with other tools, and enhanced user interface. RedSeal requires enhanced user training resources, simpler configuration, and a more intuitive dashboard.

Ease of Deployment and Customer Service: Qualys VMDR has a straightforward deployment process and responsive customer service. RedSeal's deployment can be complex, although its customer support is well-regarded.

Pricing and ROI: Qualys VMDR is cost-effective and offers a quick return on investment. RedSeal has higher setup costs but justifies them with its comprehensive features.

To learn more, read our detailed Qualys VMDR vs. RedSeal Report (Updated: December 2024).

Qualys VMDR vs. RedSeal

Download the complete report

Helped 824,067 peers since 2012

Categories and Ranking

Qualys VMDR

Ranking in Risk-Based Vulnerability Management

3rd

Average Rating

8.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

IT Asset Management (4th), Vulnerability Management (2nd), Configuration Management Databases (3rd), Container Security (12th)

RedSeal

Ranking in Risk-Based Vulnerability Management

17th

Average Rating

8.2

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Featured Reviews

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

Sajid Mukhtar

Associate Director Security at a outsourcing company with 10,001+ employees

Provides a graphical overview of our network and is easy to deploy, but needs a user-friendly interface and a feature for compliance audit policy

Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is automation."

"It is a simple solution that makes scanning easy. You just give it a scheduled task, and it will do everything for you."

"The most valuable features of Qualys VM are its ability to do proper vulnerability assessment. It has a lot of updates for all the vulnerability databases from all over the globe. It's an amazing solution when it comes to the versatility of the features it has. Additionally, the reports are very good. It generates very detailed reports about the vulnerabilities inside the environment"

"The most valuable feature is the QID part, especially of CentralList, which makes it easy to assess new critical vulnerabilities."

"I like Qualys because it is a very complete product, more so than Tenable."

"They also have threat detection which maps threats. There is a feed that comes from Qualys when a new vulnerability is found. It tells us which machines are infected with that vulnerability."

"Performs automated, regular scans in the network."

"The most valuable feature is the ability to run different capabilities with the same agent. With only one agent, we can have EDR, vulnerability management, compliance and some basic SaaS security capabilities."

More Qualys VMDR pros

"This is the only solution in the world that gives you a digital resilience score."

"RedSeal integrates the network and gives us a visual or graphical overview of our network. If an organization is geographically dispersed, for instance, with one office in Canada and one office in the Philippines, the whole network, including all devices, is integrated into RedSeal, and you can see from where the traffic is going in and out."

"RedSeal has different modules, such as the Analyzer module, which can be leveraged."

"The most valuable features are network mapping and configuration."

Cons

"When you want to cover yourself for scalability, you will be charged for the number you place on the scan itself."

"Support could be improved since the response can be slow."

"One area for improvement is the simplification of the process to ignore certain vulnerabilities on specific devices."

"When tested on Zero day, there were errors."

"Integration could be better. When you think about scanning, it's not used just with this product alone but with other Qualys products. If you think about the bundle, the product itself is good. But integration with other products and packages has space for improvement. They should also offer a better price for bundles."

"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."

"In terms of improvement for the web application console, in the older version, things were more segregated and presented in a brief format."

"They're still evolving their platform in terms of reporting capabilities."

More Qualys VMDR cons

"The dashboard should be improved to make correlating data easier to do."

"There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal."

"Sometimes, it required us to refresh the configuration. When we integrated any of the configurations into the device, sometimes, it could not detect the exact picture of that device. So, we had to reset the device to see that if it was giving true-positive results or false-positive results. In some cases, we were not able to get true-positive results. There was some kind of bug in that version. Its interface is not user-friendly and needs to be improved. It takes time to understand the interface and various options. Skybox has quite a user-friendly interface. They could provide a feature for compliance audit policy if it is already not there. A compliance audit policy ensures that all configurations are based on the best practices standards, such as CIS benchmarks standard or other similar standards. It provides visibility about whether your device configuration is based on best practices or not. Usually, such a feature is provided by other solutions such as Meteor or Tenable Nessus."

"One of the areas of concern is the GUI. It is important to our customers that the GUI looks beautiful. It's a Java Client, so you have a Java dependency."

Pricing and Cost Advice

"The license is on a yearly basis."

"It is more expensive than other products on the market."

"Qualys VM is reasonably priced."

"An annual license for a single scanner costs around $3,000."

"It's very expensive, especially if you want to use multiple modules of Qualys."

"Usually every implementation is different and the quote is in function of number of assets."

"There is a license for the use of this solution. We pay annually instead of monthly to receive a better discount on the price."

"The pricing is very competitive."

More Qualys VMDR pricing and cost advice

"The pricing is based on the number of endpoints and devices, and we have seen it range from mid-five figures to low six figures."

See which vendors are best for you

Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.

See recommendations

824,067 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

36%

Computer Software Company

11%

Financial Services Firm

10%

Manufacturing Company

Government

22%

Computer Software Company

13%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your primary use case for Qualys VM?

Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.

What is your experience regarding pricing and costs for RedSeal?

The pricing of RedSeal is competitive.

What needs improvement with RedSeal?

There is room for improvement in integrating the OT security part and the private 5G security part in RedSeal.

What is your primary use case for RedSeal?

The primary use cases for RedSeal are lifecycle management, vulnerabilities, and change management. Customers might look up or use these solutions for these areas.

Tenable Nessus vs Qualys VMDR

Comparisons

Compared 18% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 7% of the time

Wiz vs Qualys VMDR

Compared 5% of the time

More Qualys VMDR Competitors

Ekahau Site Survey vs RedSeal

Compared 18% of the time

Skybox Security Suite vs RedSeal

Compared 18% of the time

FireMon Security Manager vs RedSeal

Compared 15% of the time

AlgoSec vs RedSeal

Compared 14% of the time

iBwave Wi-Fi vs RedSeal

Compared 14% of the time

More RedSeal Competitors

Product Reports

Qualys VMDR

Download Qualys VMDR product report

Download RedSeal product report

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance

No data available

Learn More

Qualys

Overview

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

RedSeal’s network modeling and risk scoring platform builds an accurate, up-to-date model of an organization’s entire, as-built network to visualize access paths, prioritize what to fix, so you can target existing cybersecurity resources to protect your most valuable assets. With RedSeal’s Digital Resilience Score, decision makers can see the security status and benchmark progress toward digital resilience.

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

United States Postal Service, Pacific Gas and Electric Co., Interval International

Qualys VMDR vs. RedSeal