Try our new research platform with insights from 80,000+ expert users

Qualys VMDR vs ServiceNow Discovery comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 29, 2024
 

Categories and Ranking

Qualys VMDR
Ranking in IT Asset Management
4th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
92
Ranking in other categories
Vulnerability Management (2nd), Configuration Management Databases (3rd), Container Security (12th), Risk-Based Vulnerability Management (3rd)
ServiceNow Discovery
Ranking in IT Asset Management
5th
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
40
Ranking in other categories
Server Monitoring (2nd), Cloud Resource Discovery Services (1st)
 

Mindshare comparison

As of December 2024, in the IT Asset Management category, the mindshare of Qualys VMDR is 3.5%, down from 5.5% compared to the previous year. The mindshare of ServiceNow Discovery is 4.8%, up from 2.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Asset Management
 

Featured Reviews

Harold Jensen - PeerSpot reviewer
Good visibility but expensive and needs better support
Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.
RISHI GUPTA - PeerSpot reviewer
Valuable relationship building that discovers and auto-builds to make cleanup easy
Proof of concept for the solution doesn't make much sense. It totally depends on the capability of your partner. Choose the partner very carefully while you plan to use the solution. If you get a very competent and capable partner, then life will be easy. If you have a partner who only does technical implementations, then that won't help you. You need to have CMDB and CSDM experts on the team because the solution is for CMDB and CSDM. If you don't design your data model really well, then the solution will not give you much result. The solution is not fully automated so you still need to make some effort. You have to go through the complete remodeling cycle for non-useful data elimination whenever you add a new LAN segment or new mid-server on a new data center or service. It is a little bit of effort, but it is worth the effort. Based on the necessary but important effort, the solution is rated a seven out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I find Qualys VM very robust, and it's very useful for vulnerability management and patch management. The value that it brings to my environment is economies of scale. There is no limitation on adding any endpoints. You go by the rule, and it's added once another endpoint is added to our environment. It's automatically installed, and it's less work from our end. It frees up my license automatically if I don't need an endpoint or if my machine is decommissioned. I like the dashboard displays because I don't see any duplication. The most important part is vulnerability management and prioritization. Unlike Symantec, it shows the kind of vulnerability I would want to patch first. It provides a holistic view of the kind of vulnerabilities and the ones I should remediate first. I don't have to do a scan; it just brings up those critical kinds of vulnerabilities like zero-day vulnerabilities and tells me to prioritize them. You have to prioritize these vulnerabilities first and go on with the rest. The dashboard shows me the ones that have been fixed, so I don't have to complete an aging report. The user experience and the graphical interface are good. As it's user-friendly and understandable on an executive level, it brings real value. We also use this solution because it's robust and flexibile."
"I like the automated report generation and vulnerability report generation."
"Overall, the solution is highly rated because of its simplicity and efficiency."
"Authenticated scans provide different options, including those using or not using the FactSet and adding option profiles."
"It is a stable solution."
"The Vulnerability Management and Patch Management features are the most valuable features of this solution."
"The solution is easy to use."
"Vulnerability management is the most valuable one and it’s a must in every organization."
"We mostly use the solution's ITSM and ITOM capabilities in most workflows."
"In the past, I found troubleshooting difficult in ServiceNow Discovery because I didn't have much exposure to the platform during that time, but then I explored some troubleshooting features, and I found that it wasn't that tough, so this is one of the qualities I like about ServiceNow Discovery. I also like that log reading in ServiceNow Discovery is much better than other tools. Another valuable feature of the tool is that you don't need to install many tools to deploy ITSM. You only need to subscribe to the modules to deploy the proper ITSM in your organization."
"It's pretty robust, and it's agentless for the most part. So, you don't need to deploy agents, which makes it a lot easier to stand up."
"It has been stable since deployment."
"I believe one of the great functionalities or improvements in ServiceNow Discovery is its ability to gather information about any Configuration Items (CIs)."
"I am impressed with the tool's incident problem change management."
"The best part about ServiceNow Discovery is that it is included in the ServiceNow suite."
"ServiceNow's Discovery feature is quite significant because it allows for service mapping and integrates with VIN management. It involves adding a business context to servers, routers, switches, and data centers. This means understanding not only what's installed on these systems and how they function together but also recognizing their significance in terms of business applications from the business's perspective and how they impact business processes and capabilities. So when we delve into these aspects and connect them to the essential components, it can help you engage in more meaningful discussions to enhance capacity management practices. In essence, it contributes to the overall IT portfolio, almost functioning as a business platform. This platform is accessible to users who leverage the data to initiate incidents, implement changes, and resolve problems. Consequently, consolidating all configuration items or assets into a unified platform makes sense, especially considering you already have Discovery in place. If the cost is reasonable, the other two components might not provide much value, except for their user-friendliness, which is often less important to leaders compared to the desired outcomes."
 

Cons

"Sometimes the scanning can get overwhelmed and start to drag when a lot of users are trying to scan at once."
"I would like to see this solution simplified to work more easily in a multi-cloud environment."
"Improve the user interface."
"We are moving away from Qualys to Defender ATP because I find that Defender ATP is much better at prioritizing the vulnerabilities that I should be looking at."
"Finding things in management can be quite difficult."
"The reporting section needs improvement as running reports can take several hours."
"One area of the product that could be improved is the management of vulnerabilities detected on disabled applications."
"Qualys VMDR is basically susceptible to false positives, and false negatives."
"The service mapping component is less developed than it is in other solutions, and is in need of improvement."
"I find it valuable to enhance IP address management. I've been in this field since around 2011, and my experience since then has revolved around automation, deployment, distribution, and comprehensive inventory management, all crucial for deploying various components, including patches. When we talk about patch management or vulnerability management, it's more complex than just applying patches; sometimes, you need to undergo significant upgrades or phase out old components for new ones, and this can turn into a substantial project, explaining why vulnerabilities persist. Now, the role of ServiceNow Discovery and security operations, or at one point, looking at vulnerability management in ServiceNow Discovery, is crucial. It allows you to identify vulnerabilities on assets and, with the addition of discovery, service mapping, and event management, you gain a business context for these vulnerabilities. It's not merely about knowing they exist on a server; it's about understanding which services are responsible for critical business processes or transactions, like payroll. This knowledge changes the approach and execution of vulnerability remediation."
"ServiceNow is very costly."
"The current limitation requires having mid servers or discovery servers in each data center for proper discovery, hindering the ability to discover assets across continents such as Asia Pacific and Europe."
"In a few instances, ServiceNow has failed to discover some basic things. Some other tools are better at network discovery than ServiceNow. I'm not talking about database servers or any other infrastructure—only networking. Cloud discovery could also be better."
"In my opinion, it's quite slow compared to other tools, like Device42. Also, there are predefined fields in Device42 that are not available in ServiceNow. These are the basic things I think can be improved here."
"The solution is too high priced."
"The initial setup could be made easier. We hired professionals to implement it, and they trained our employees for ongoing processes."
 

Pricing and Cost Advice

"I used to work there, so I never paid for the product. As an employee, we get a lifetime license for personal use, and that's what I'm using. It is a comprehensive platform, so there is a lot more to it. There could be other solutions that are probably a little bit cheaper, but it depends on what people need. Different people have different needs. It offers many things on the same platform. If you add all the things up, it should be cheaper, but I have not done any analysis specifically."
"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."
"It is more expensive than other products on the market."
"We do see over $100,000 in terms of price, for mid-size programs. You likely will pay more than $100,000 without any discount. It is a bit pricey."
"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."
"An annual license for a single scanner costs around $3,000."
"The pricing and licensing for Qualys could be improved."
"Qualys Virtual Scanner Appliance isn't expensive right now. But the price for their product bundles could be better."
"The price could be better. It's a bit on the pricey side."
"The product is not cheap."
"It is not recommended for smaller companies because of the price."
"As per a general discussion I had with the stakeholders, I figured out that it is a costly tool. There is a need to make additional payments apart from the licensing fees for better support services from ServiceNow."
"The product pricing is fair and reasonable for the value it provides."
"The solution is not inexpensive so pricing is rated a three out of ten."
"It's a bit expensive compared to other products in the market, but it's worth the money you pay because it's far advanced in terms of features, automation, and capabilities compared to other products."
"There is a subscription for ServiceNow Discovery. It's expensive, but I think it's one of the best solutions on the market, so it's worth it."
report
Use our free recommendation engine to learn which IT Asset Management solutions are best for your needs.
823,875 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
36%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
6%
Computer Software Company
15%
Financial Services Firm
12%
Healthcare Company
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your primary use case for Qualys VM?
Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...
What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...
What is your experience regarding pricing and costs for Qualys VMDR?
For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.
What do you like most about ServiceNow Discovery?
The solution can prioritize the discovery of IP ranges. The product automatically places all Discovery CIs into the correct class within the CMDB.
What is your experience regarding pricing and costs for ServiceNow Discovery?
The product pricing is fair and reasonable for the value it provides. However, it is important to factor in the ongoing maintenance costs, as the system requires professional upkeep to ensure optim...
What needs improvement with ServiceNow Discovery?
The continuous improvement in the quality and customization of the product features would be beneficial, particularly as more customers rely heavily on its capabilities.
 

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance
No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
York, National Grid, DXC Technology, experian, BEACHBODY
Find out what your peers are saying about Qualys VMDR vs. ServiceNow Discovery and other solutions. Updated: December 2024.
823,875 professionals have used our research since 2012.