Qualys VMDR vs ServiceNow Discovery comparison

Qualys and ServiceNow are both solutions in the IT Asset Management category. Qualys is ranked #4 with an average rating of 8.2, while ServiceNow is ranked #5 with an average rating of 8.2. Qualys holds a 3.5% mindshare in IAM, compared to ServiceNow’s 4.8% mindshare. Additionally, 94% of Qualys users are willing to recommend the solution, compared to 97% of ServiceNow users who would recommend it.

Qualys VMDR

Read 92 Qualys VMDR reviews

1,041 Views
789 Comparison Views

94% willing to recommend

ServiceNow Discovery

Read 40 ServiceNow Discovery reviews

1,208 Views
593 Comparison Views

97% willing to recommend

Qualys VMDR

ServiceNow Discovery

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 29, 2024

Qualys VMDR and ServiceNow Discovery are both comprehensive tools for vulnerability management and asset discovery. ServiceNow Discovery has the upper hand due to its extensive features, despite Qualys VMDR excelling in pricing and support.

Features: Qualys VMDR includes automated scanning, detailed reporting, and effective asset tracking. ServiceNow Discovery offers wide range of integrations, scalable architecture, and extensive customization options.

Room For Improvement: Qualys VMDR needs enhancements in user management, performance optimization, and interface design. ServiceNow Discovery requires better documentation, more intuitive workflows, and streamlined setup processes.

Ease of Deployment and Customer Service: Qualys VMDR is noted for straightforward deployment and responsive support. ServiceNow Discovery has robust deployment options but faces criticism for a steeper learning curve and less responsive support.

Pricing and ROI: Qualys VMDR is cost-effective with quick ROI. ServiceNow Discovery, while more expensive, offers worthwhile ROI through advanced features.

To learn more, read our detailed Qualys VMDR vs. ServiceNow Discovery Report (Updated: December 2024).

Buyer's Guide

Qualys VMDR vs. ServiceNow Discovery

December 2024

Download the complete report

Helped 823,875 peers since 2012

Categories and Ranking

Qualys VMDR

Ranking in IT Asset Management

4th

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Vulnerability Management (2nd), Configuration Management Databases (3rd), Container Security (12th), Risk-Based Vulnerability Management (3rd)

ServiceNow Discovery

Ranking in IT Asset Management

5th

Average Rating

8.2

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Server Monitoring (2nd), Cloud Resource Discovery Services (1st)

Mindshare comparison

As of December 2024, in the IT Asset Management category, the mindshare of Qualys VMDR is 3.5%, down from 5.5% compared to the previous year. The mindshare of ServiceNow Discovery is 4.8%, up from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

IT Asset Management

Featured Reviews

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

RISHI GUPTA

Senior Manager at a manufacturing company with 5,001-10,000 employees

Valuable relationship building that discovers and auto-builds to make cleanup easy

Proof of concept for the solution doesn't make much sense. It totally depends on the capability of your partner. Choose the partner very carefully while you plan to use the solution. If you get a very competent and capable partner, then life will be easy. If you have a partner who only does technical implementations, then that won't help you. You need to have CMDB and CSDM experts on the team because the solution is for CMDB and CSDM. If you don't design your data model really well, then the solution will not give you much result. The solution is not fully automated so you still need to make some effort. You have to go through the complete remodeling cycle for non-useful data elimination whenever you add a new LAN segment or new mid-server on a new data center or service. It is a little bit of effort, but it is worth the effort. Based on the necessary but important effort, the solution is rated a seven out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I find Qualys VM very robust, and it's very useful for vulnerability management and patch management. The value that it brings to my environment is economies of scale. There is no limitation on adding any endpoints. You go by the rule, and it's added once another endpoint is added to our environment. It's automatically installed, and it's less work from our end. It frees up my license automatically if I don't need an endpoint or if my machine is decommissioned. I like the dashboard displays because I don't see any duplication. The most important part is vulnerability management and prioritization. Unlike Symantec, it shows the kind of vulnerability I would want to patch first. It provides a holistic view of the kind of vulnerabilities and the ones I should remediate first. I don't have to do a scan; it just brings up those critical kinds of vulnerabilities like zero-day vulnerabilities and tells me to prioritize them. You have to prioritize these vulnerabilities first and go on with the rest. The dashboard shows me the ones that have been fixed, so I don't have to complete an aging report. The user experience and the graphical interface are good. As it's user-friendly and understandable on an executive level, it brings real value. We also use this solution because it's robust and flexibile."

"I like the automated report generation and vulnerability report generation."

"Overall, the solution is highly rated because of its simplicity and efficiency."

"Authenticated scans provide different options, including those using or not using the FactSet and adding option profiles."

"It is a stable solution."

"The Vulnerability Management and Patch Management features are the most valuable features of this solution."

"The solution is easy to use."

"Vulnerability management is the most valuable one and it’s a must in every organization."

More Qualys VMDR pros

"We mostly use the solution's ITSM and ITOM capabilities in most workflows."

"In the past, I found troubleshooting difficult in ServiceNow Discovery because I didn't have much exposure to the platform during that time, but then I explored some troubleshooting features, and I found that it wasn't that tough, so this is one of the qualities I like about ServiceNow Discovery. I also like that log reading in ServiceNow Discovery is much better than other tools. Another valuable feature of the tool is that you don't need to install many tools to deploy ITSM. You only need to subscribe to the modules to deploy the proper ITSM in your organization."

"It's pretty robust, and it's agentless for the most part. So, you don't need to deploy agents, which makes it a lot easier to stand up."

"It has been stable since deployment."

"I believe one of the great functionalities or improvements in ServiceNow Discovery is its ability to gather information about any Configuration Items (CIs)."

"I am impressed with the tool's incident problem change management."

"The best part about ServiceNow Discovery is that it is included in the ServiceNow suite."

"ServiceNow's Discovery feature is quite significant because it allows for service mapping and integrates with VIN management. It involves adding a business context to servers, routers, switches, and data centers. This means understanding not only what's installed on these systems and how they function together but also recognizing their significance in terms of business applications from the business's perspective and how they impact business processes and capabilities. So when we delve into these aspects and connect them to the essential components, it can help you engage in more meaningful discussions to enhance capacity management practices. In essence, it contributes to the overall IT portfolio, almost functioning as a business platform. This platform is accessible to users who leverage the data to initiate incidents, implement changes, and resolve problems. Consequently, consolidating all configuration items or assets into a unified platform makes sense, especially considering you already have Discovery in place. If the cost is reasonable, the other two components might not provide much value, except for their user-friendliness, which is often less important to leaders compared to the desired outcomes."

More ServiceNow Discovery pros

Cons

"Sometimes the scanning can get overwhelmed and start to drag when a lot of users are trying to scan at once."

"I would like to see this solution simplified to work more easily in a multi-cloud environment."

"Improve the user interface."

"We are moving away from Qualys to Defender ATP because I find that Defender ATP is much better at prioritizing the vulnerabilities that I should be looking at."

"Finding things in management can be quite difficult."

"The reporting section needs improvement as running reports can take several hours."

"One area of the product that could be improved is the management of vulnerabilities detected on disabled applications."

"Qualys VMDR is basically susceptible to false positives, and false negatives."

More Qualys VMDR cons

"The service mapping component is less developed than it is in other solutions, and is in need of improvement."

"I find it valuable to enhance IP address management. I've been in this field since around 2011, and my experience since then has revolved around automation, deployment, distribution, and comprehensive inventory management, all crucial for deploying various components, including patches. When we talk about patch management or vulnerability management, it's more complex than just applying patches; sometimes, you need to undergo significant upgrades or phase out old components for new ones, and this can turn into a substantial project, explaining why vulnerabilities persist. Now, the role of ServiceNow Discovery and security operations, or at one point, looking at vulnerability management in ServiceNow Discovery, is crucial. It allows you to identify vulnerabilities on assets and, with the addition of discovery, service mapping, and event management, you gain a business context for these vulnerabilities. It's not merely about knowing they exist on a server; it's about understanding which services are responsible for critical business processes or transactions, like payroll. This knowledge changes the approach and execution of vulnerability remediation."

"ServiceNow is very costly."

"The current limitation requires having mid servers or discovery servers in each data center for proper discovery, hindering the ability to discover assets across continents such as Asia Pacific and Europe."

"In a few instances, ServiceNow has failed to discover some basic things. Some other tools are better at network discovery than ServiceNow. I'm not talking about database servers or any other infrastructure—only networking. Cloud discovery could also be better."

"In my opinion, it's quite slow compared to other tools, like Device42. Also, there are predefined fields in Device42 that are not available in ServiceNow. These are the basic things I think can be improved here."

"The solution is too high priced."

"The initial setup could be made easier. We hired professionals to implement it, and they trained our employees for ongoing processes."

More ServiceNow Discovery cons

Pricing and Cost Advice

"I used to work there, so I never paid for the product. As an employee, we get a lifetime license for personal use, and that's what I'm using. It is a comprehensive platform, so there is a lot more to it. There could be other solutions that are probably a little bit cheaper, but it depends on what people need. Different people have different needs. It offers many things on the same platform. If you add all the things up, it should be cheaper, but I have not done any analysis specifically."

"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."

"It is more expensive than other products on the market."

"We do see over $100,000 in terms of price, for mid-size programs. You likely will pay more than $100,000 without any discount. It is a bit pricey."

"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."

"An annual license for a single scanner costs around $3,000."

"The pricing and licensing for Qualys could be improved."

"Qualys Virtual Scanner Appliance isn't expensive right now. But the price for their product bundles could be better."

More Qualys VMDR pricing and cost advice

"The price could be better. It's a bit on the pricey side."

"The product is not cheap."

"It is not recommended for smaller companies because of the price."

"As per a general discussion I had with the stakeholders, I figured out that it is a costly tool. There is a need to make additional payments apart from the licensing fees for better support services from ServiceNow."

"The product pricing is fair and reasonable for the value it provides."

"The solution is not inexpensive so pricing is rated a three out of ten."

"It's a bit expensive compared to other products in the market, but it's worth the money you pay because it's far advanced in terms of features, automation, and capabilities compared to other products."

"There is a subscription for ServiceNow Discovery. It's expensive, but I think it's one of the best solutions on the market, so it's worth it."

More ServiceNow Discovery pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which IT Asset Management solutions are best for your needs.

See recommendations

823,875 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

36%

Computer Software Company

11%

Financial Services Firm

10%

Manufacturing Company

Computer Software Company

15%

Financial Services Firm

12%

Healthcare Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your primary use case for Qualys VM?

Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...

See all answers

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

See all answers

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.

See all answers

What do you like most about ServiceNow Discovery?

The solution can prioritize the discovery of IP ranges. The product automatically places all Discovery CIs into the correct class within the CMDB.

See all answers

What is your experience regarding pricing and costs for ServiceNow Discovery?

The product pricing is fair and reasonable for the value it provides. However, it is important to factor in the ongoing maintenance costs, as the system requires professional upkeep to ensure optim...

See all answers

What needs improvement with ServiceNow Discovery?

The continuous improvement in the quality and customization of the product features would be beneficial, particularly as more customers rely heavily on its capabilities.

See all answers

Comparisons

Tenable Nessus vs Qualys VMDR

Compared 18% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 8% of the time

Wiz vs Qualys VMDR

Compared 5% of the time

More Qualys VMDR Competitors

Tanium vs ServiceNow Discovery

Compared 30% of the time

Lansweeper vs ServiceNow Discovery

Compared 18% of the time

Microsoft Configuration Manager vs ServiceNow Discovery

Compared 12% of the time

BMC Helix Discovery vs ServiceNow Discovery

Compared 7% of the time

Device42 vs ServiceNow Discovery

Compared 3% of the time

More ServiceNow Discovery Competitors

Product Reports

Buyer's Guide

Qualys VMDR

November 2024

Download Qualys VMDR product report

Buyer's Guide

ServiceNow Discovery

November 2024

Download ServiceNow Discovery product report

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance

No data available

Learn More

Qualys

Video not available

ServiceNow

Overview

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

ServiceNow Discovery finds applications and devices on your network, and then updates the CMDB with the information it finds. Discovery is available as a separate subscription from the rest of the Now Platform.

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

York, National Grid, DXC Technology, experian, BEACHBODY

Buyer's Guide

Qualys VMDR vs. ServiceNow Discovery

December 2024

Free Report: Qualys VMDR vs. ServiceNow Discovery

Find out what your peers are saying about Qualys VMDR vs. ServiceNow Discovery and other solutions. Updated: December 2024.

DOWNLOAD NOW

823,875 professionals have used our research since 2012.

See our Qualys VMDR vs. ServiceNow Discovery report.

See our list of best IT Asset Management vendors.

We monitor all IT Asset Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.