Qualys VMDR vs SentinelOne Singularity Identity comparison

Qualys and SentinelOne are both solutions in the Vulnerability Management category. Qualys is ranked #3 with an average rating of 8.2, while SentinelOne is ranked #13 with an average rating of 8.9. Additionally, 94% of Qualys users are willing to recommend the solution, compared to 95% of SentinelOne users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

Qualys VMDR and SentinelOne Singularity Identity are competing products in the security and vulnerability management space. While Qualys VMDR is noted for its strengths in vulnerability management and compliance, SentinelOne Singularity Identity has the advantage in identity protection and integration capabilities.

Features: Qualys VMDR is highly valued for its vulnerability management and continuous monitoring. With robust scanning and cloud-based deployment, it enhances network security and compliance. Quick vulnerability mitigation is supported by an extensive threat intelligence database. SentinelOne Singularity Identity excels in dynamic, behavior-based threat detection, offering comprehensive identity protection. Integration with third-party tools and comprehensive threat visibility are significant highlights. Additionally, it provides excellent real-time protection with automation capabilities for remediation.

Room for Improvement: Users of Qualys VMDR seek enhancements in integration with third-party tools and better reporting features. Improved asset tagging and management, alongside streamlined PCI compliance processes, are also desired. The pricing is noted as high. SentinelOne Singularity Identity needs better agent updates management and endpoint configuration. Absence of web filtering and complexities in custom configurations are noted. Pricing structure also requires predictability.

Ease of Deployment and Customer Service: Qualys VMDR offers flexible deployment across various environments and straightforward cloud setup. Customer service receives mixed feedback, being responsive but occasionally slow. SentinelOne Singularity Identity's deployment in public cloud settings is fast, with customer service receiving high ratings for responsiveness and quick resolutions.

Pricing and ROI: Qualys VMDR is seen as expensive but justifies the cost with comprehensive capabilities and strong ROI from enhanced security and risk reduction. Pricing models are flexible but can be high for small enterprises. SentinelOne Singularity Identity, while also costly, bundles features without separate pricing, offering value for money. Communication on price adjustments needs improvement, but its advanced features often justify the cost.

To learn more, read our detailed Qualys VMDR vs. SentinelOne Singularity Identity Report (Updated: March 2025).

Buyer's Guide

Qualys VMDR vs. SentinelOne Singularity Identity

March 2025

Download the complete report

Helped 842,466 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Zafran Security

Featured Reviews

Israel Cavazos Landini

Associate Director IT Security Operations at Novartis

Weekly insights and risk analysis facilitate informed security decisions

I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.

Read full review

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

Roftiel Constantine

Global Chief Information Security Officer at Barry-Wehmiller

Provides proactive threat remediation, reduces alert volume, and enhances incident response capabilities

During our pre-purchase evaluation of SentinelOne's EDR capabilities three years ago, we were consistently impressed by the positive relationships customers reported having with SentinelOne's engineers, sales teams, and customer success managers. These strong relationships, evident in the customers' unsolicited feedback, highlighted the "soft skills" and intangible qualities that SentinelOne possessed. This positive customer experience has been mirrored in our own interactions with them. Their responsiveness to our needs, particularly when addressing a couple of challenges we faced, has been excellent. They proactively scheduled weekly meetings to demonstrate their commitment to resolving our issues, a customer-centric approach I admire. SentinelOne's dedication to customer service, including their rapid technology updates and responsiveness to our suggestions, has been crucial to our success in protecting our organization. Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart. Overall, I highly recommend SentinelOne based on our positive interactions across all levels of their organization.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Zafran has become an indispensable tool in our cybersecurity arsenal."

"Zafran is an excellent tool."

"We also like the flexibility in their licensing."

"Qualys VM has allowed us to know the vulnerabilities we need to prioritize based on the threat levels and the possible impact if there's an intrusion."

"The solution shows us classic categories, including high, medium, and low risks. It also shows critical items, and that gives us the advantage of prioritizing things."

"The product's patch management is excellent for keeping our critical servers and third-party applications updated efficiently."

"Authenticated scans provide different options, including those using or not using the FactSet and adding option profiles."

"It gives a very good overview of the inventory assessment process, and it can be accessed across our company because it's a global tool."

"Qualys has a continuous endpoint monitoring feature for agent-based scanning. Once you deploy the solution, it monitors everything that is happening every 30 minutes. Then, if there are any vulnerabilities, they are reported."

"I find Qualys VM very robust, and it's very useful for vulnerability management and patch management. The value that it brings to my environment is economies of scale. There is no limitation on adding any endpoints. You go by the rule, and it's added once another endpoint is added to our environment. It's automatically installed, and it's less work from our end. It frees up my license automatically if I don't need an endpoint or if my machine is decommissioned. I like the dashboard displays because I don't see any duplication. The most important part is vulnerability management and prioritization. Unlike Symantec, it shows the kind of vulnerability I would want to patch first. It provides a holistic view of the kind of vulnerabilities and the ones I should remediate first. I don't have to do a scan; it just brings up those critical kinds of vulnerabilities like zero-day vulnerabilities and tells me to prioritize them. You have to prioritize these vulnerabilities first and go on with the rest. The dashboard shows me the ones that have been fixed, so I don't have to complete an aging report. The user experience and the graphical interface are good. As it's user-friendly and understandable on an executive level, it brings real value. We also use this solution because it's robust and flexibile."

More Qualys VMDR pros

"The XDR capabilities are very good."

"The incident and threat logs are great."

"I like the detection and protection features. We don't need to do anything, and it will alert us when the mitigation is not successful. We only need to target those endpoints. Otherwise, we don't have to do anything about that."

"Incident response is one of the key areas where the solution has been very useful. Whenever there is an incident, instead of being reactive, the government is now able to quickly gain the data that it needs to see what its end agency is also seeing and partner with them in real-time to look at the same data and to collaborate where needed, empowering the agency to be able to do their job."

"The AI-based detection, scanning, prevention and mitigation features are the most valuable features."

"The threat detection capability is the most valuable feature."

"The product's initial setup phase is straightforward."

"Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart."

More SentinelOne Singularity Identity pros

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."

"If anything, I would like to see the user interface modernized a bit more."

"If AI features were integrated, it could enhance the capabilities significantly."

"It would be helpful to have features for better tracking, including options for adding relevant owners or supporting groups for each asset."

"Integration could be better. When you think about scanning, it's not used just with this product alone but with other Qualys products. If you think about the bundle, the product itself is good. But integration with other products and packages has space for improvement. They should also offer a better price for bundles."

"The reporting and the GUI need improvements."

"Qualys currently does not have any features for scanning SCADA, IoT, and Industrial Control Systems."

"Qualys should improve their customer experience. They need to improve the tech support experience and the turnaround time."

"From the application security perspective, Qualys has a way to go."

More Qualys VMDR cons

"The UI can be more user-friendly."

"Our engineers are dealing with issues to add exclusions to the antivirus for custom applications."

"Our company has different locations, such as Sunbury, Oklahoma, and Alabama. I have my devices by location, and I have not found a way to choose all the endpoints and then push the update automatically. I have been doing it one by one."

"The policies could be more precise, and Singularity should use more templates like alternative solutions have. Endpoint management is poor. We cannot manage individual endpoints and must rely on policies, exclusions, or block lists to apply settings to a group instead of the individual agent. If I have to make settings for one computer, I need to create a group, apply the configuration, and move the agent there. It's challenging to manage endpoints that way."

"To improve SentinelOne, I would suggest adding a network detection and response capability."

"The first-level support has room for improvement."

"One area for improvement would be the self-healing nature of the agent."

"SentinelOne Singularity Identity could be more user-friendly."

More SentinelOne Singularity Identity cons

Pricing and Cost Advice

Information not available

"It is more expensive than other products on the market."

"There is a license for the use of this solution. We pay annually instead of monthly to receive a better discount on the price."

"There are no additional fees in addition to the standard licensing fees."

"Qualys Virtual Scanner Appliance isn't expensive right now. But the price for their product bundles could be better."

"It is a high cost product. Compared to the other solutions, it is around 15 to 20% higher in cost."

"When you want to cover yourself for scalability, you will be charged for the number you place on the scan itself."

"The tool's pricing is expensive and I would rate the pricing a seven out of ten."

"Usually every implementation is different and the quote is in function of number of assets."

More Qualys VMDR pricing and cost advice

"Its price is a little bit high. It is a nice product, but it comes at a cost. Compared to other products, it is not cheap, but you sometimes have to pay for the value you get. It is not cheap, but it is worth it."

"There is a need to make yearly payments towards the licensing charges associated with the product...I think the prices associated with the product are okay and it is not too expensive."

"Compared to competitors, it's well-priced for the quality offered, and I don't see anyone surpassing them in that regard."

"The price is affordable."

"The cost of SentinelOne Singularity Identity is better than CrowdStrike."

"The pricing is a bit high."

"The price of SentinelOne Singularity Identity is relatively high, but it offers numerous features and capabilities that make it well worth the investment."

"SentinelOne Singularity Identity's pricing is cheaper than CrowdStrike and is really good."

More SentinelOne Singularity Identity pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

842,466 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Financial Services Firm

11%

University

Retailer

Educational Organization

36%

Financial Services Firm

11%

Computer Software Company

10%

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

13%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?

Pricing for Zafran Security is not expensive. We have a contract for five years, and the cost is lower than other too...

See all answers

What needs improvement with Zafran Security?

I would like to see an integration with Check Point firewalls. It's essential for us and they are currently working o...

See all answers

What is your primary use case for Zafran Security?

We use Zafran Security for threat prioritization. We establish priority to understand which risks should be patched o...

See all answers

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagg...

See all answers

What is your experience regarding pricing and costs for Qualys VMDR?

Qualys offers better pricing and is feature-packed compared to other tools.

See all answers

What needs improvement with Qualys VMDR?

They can tweak their UI since the new version seems a bit jumbled up, and the old UI was more user-friendly.

See all answers

Does SentinelOne have a Virtual Patching functionality?

Yes -- SentinelOne has a Virtual Patching functionality called Virtual Patching and Exploit Shield. This preventive s...

See all answers

What do you like most about SentinelOne Singularity Identity?

The XDR capabilities are very good.

See all answers

What is your experience regarding pricing and costs for SentinelOne Singularity Identity?

I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with Se...

See all answers

Comparisons

Dazz.io vs Zafran Security

Compared 52% of the time

Vulcan Cyber vs Zafran Security

Compared 21% of the time

ServiceNow Security Operations vs Zafran Security

Compared 19% of the time

Tenable Vulnerability Management vs Zafran Security

Compared 8% of the time

More Zafran Security Competitors

Tenable Nessus vs Qualys VMDR

Compared 16% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 6% of the time

Wiz vs Qualys VMDR

Compared 6% of the time

More Qualys VMDR Competitors

Microsoft Defender for Identity vs SentinelOne Singularity Identity

Compared 16% of the time

Tenable Vulnerability Management vs SentinelOne Singularity Identity

Compared 13% of the time

SailPoint Identity Security Cloud vs SentinelOne Singularity Identity

Compared 9% of the time

Microsoft Entra ID Protection vs SentinelOne Singularity Identity

Compared 8% of the time

Microsoft Defender for Office 365 vs SentinelOne Singularity Identity

Compared 7% of the time

More SentinelOne Singularity Identity Competitors

Product Reports

Buyer's Guide

Vulnerability Management

March 2025

Download Zafran Security product report

Buyer's Guide

Qualys VMDR

March 2025

Download Qualys VMDR product report

Buyer's Guide

SentinelOne Singularity Identity

March 2025

Download SentinelOne Singularity Identity product report

Also Known As

No data available

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security

No data available

Overview

Zafran Security integrates with existing security tools to identify and mitigate vulnerabilities effectively, proving that most critical vulnerabilities are not exploitable, optimizing threat management.

Zafran Security introduces an innovative operating model for managing security threats and vulnerabilities. By leveraging the threat exposure management platform, it pinpoints and prioritizes exploitable vulnerabilities, reducing risk through immediate remediation. This platform enhances your hybrid cloud security by normalizing vulnerability signals and integrating specific IT context data, such as CVE runtime presence and internet asset reachability, into its analysis. No longer reliant on patch windows, Zafran Security allows you to manage risks actively.

What are the key features of Zafran Security?

Threat Exposure Management: Utilizes existing tools to prioritize vulnerabilities and manage threats.
Integrative Analysis: Combines security data with IT context for precise vulnerability management.
Real-time Risk Reduction: Enables immediate risk management without waiting for patches.
Hybrid Cloud Compatibility: Functions across diverse cloud environments for comprehensive security.

What benefits can users expect from Zafran Security?

Improved Security: Enhances protection by efficiently identifying and mitigating risks.
Cost Efficiency: Reduces unnecessary patching expenses by confirming non-exploitable vulnerabilities.
Time Savings: Frees developers to focus on root causes by handling immediate threats.
Comprehensive Insight: Offers a holistic view of security threats and vulnerabilities.

In industries where security is paramount, such as finance and healthcare, Zafran Security provides invaluable protection by ensuring that only exploitable vulnerabilities are addressed. It allows entities to maintain robust security measures while allocating resources efficiently, fitting seamlessly into existing security strategies.

Zafran Security

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Qualys

Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.

Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.

Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.

By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.

SentinelOne

Sample Customers

Information Not Available

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

Information Not Available

Buyer's Guide

Qualys VMDR vs. SentinelOne Singularity Identity

March 2025

Free Report: Qualys VMDR vs. SentinelOne Singularity Identity

Find out what your peers are saying about Qualys VMDR vs. SentinelOne Singularity Identity and other solutions. Updated: March 2025.

DOWNLOAD NOW

842,466 professionals have used our research since 2012.

See our Qualys VMDR vs. SentinelOne Singularity Identity report.

See our list of best Vulnerability Management vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.