Qualys VMDR vs Tanium comparison

Read 15 Tanium reviews

2,514 Views
1,799 Comparison Views

71% willing to recommend

Qualys VMDR

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

Qualys VMDR and Tanium compete in vulnerability management. Many users prefer Qualys for its cloud integration and continuous monitoring, while others appreciate Tanium's asset management and instant discovery, giving Qualys a slight advantage based on specific requirements.

Features: Qualys VMDR is favored for its seamless cloud integration, enhancing user experience through robust dashboards and clear asset management. Users also benefit from its ability to prioritize vulnerabilities efficiently. Tanium is renowned for its granular control over assets, providing effective threat detection. Users in large environments commend its instant discovery capabilities for efficient asset management.

Room for Improvement: Qualys VMDR could improve reporting customization and asset management processes. Users desire faster technical support and reduced false-positive rates. Tanium faces challenges with its user interface and desires include enhanced reporting and integration options, plus improved scalability and streamlined patch management.

Ease of Deployment and Customer Service: Qualys VMDR offers flexible deployment across cloud and on-premises environments, but some users find the setup complex. While its customer service is responsive, there's a call for improving support quality. Tanium has positive deployment feedback, yet initial setups can be hard. Its high customer service satisfaction highlights continual support throughout deployment.

Pricing and ROI: Qualys VMDR, regarded as pricey, offers customizable pricing models, seen as a good investment for larger enterprises due to its comprehensive features. Tanium also incurs high costs but delivers value through substantial asset management. Pricing varies by region and asset count, often justified by its critical role in reducing business risks.

To learn more, read our detailed Qualys VMDR vs. Tanium Report (Updated: January 2025).

Download the complete report

Qualys VMDR vs. Tanium

January 2025

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys VMDR

Ranking in Vulnerability Management

2nd

Average Rating

8.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

IT Asset Management (4th), Configuration Management Databases (2nd), Container Security (12th), Risk-Based Vulnerability Management (3rd)

Tanium

Ranking in Vulnerability Management

23rd

Average Rating

7.4

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Server Monitoring (9th), Endpoint Protection Platform (EPP) (35th), Endpoint Detection and Response (EDR) (26th)

Mindshare comparison

As of January 2025, in the Vulnerability Management category, the mindshare of Qualys VMDR is 11.1%, down from 13.7% compared to the previous year. The mindshare of Tanium is 2.6%, up from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management

Featured Reviews

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Good visibility but expensive and needs better support

Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.

Read full review

Mo Vermeiren

Cybersecurity Business & Technology Consultant at Capgemini

Is able to make several campaigns work in parallel, but the user interface needs improvement

It's mainly used by the cybersecurity team for Windows patching and deployment of some software solutions I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features are vulnerability detection and the scanning capability to enable identification of vulnerabilities across our network."

"Monitors workstations and servers for vulnerabilities and creates reports."

"The most valuable features of Qualys VM are its ability to do proper vulnerability assessment. It has a lot of updates for all the vulnerability databases from all over the globe. It's an amazing solution when it comes to the versatility of the features it has. Additionally, the reports are very good. It generates very detailed reports about the vulnerabilities inside the environment"

"The process of defining and discovering scans is organized efficiently."

"This is one of the best products I have worked with so far. I like the power of Qualys, and it's a better solution because you can scan a compact file, a BIT file, or batch files. The product already knows what's happening inside, and you don't need to expand the package. Tenable will do the same thing, but you need to have a package issuance claim. With Qualys, we can immediately understand the file, even a compact file. If there's some kind of discovery or incident, you will know what happened in the environment."

"The initial setup was good. We didn't have any problems with it."

"The most valuable feature is the certificate management."

"Tech support is helpful."

More Qualys VMDR pros

"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."

"I like the fact that you can create patching campaigns depending on the area of your network that you want to address first. I like the ability it has to make several campaigns that work in parallel."

"The security features are very valuable."

"The interrogation piece was the most valuable feature because it was very detailed."

"I would say Tanium is the best tool for vulnerability management."

"I'm not so familiar with the tool but I like the interaction of the console to the picture. Patching is the primary model I have been focusing on for the last couple of weeks. So I have created a proof of concept environment and have been checking the available features."

"The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps."

"The product is granular and can build complex roles compared to other EDR vendors."

More Tanium pros

Cons

"Qualys should improve their customer experience. They need to improve the tech support experience and the turnaround time."

"Some of the older features could be polished instead of focusing on releasing new features."

"The response time of technical support takes a while."

"Qualys VM's scanner doesn't pick up every vulnerability, so we have to use multiple scanners to cover that gap."

"The only improvement I can think of is on the implementation side. At times it is a bit slow."

"I do not like that all of the data is stored on the cloud."

"It's quite complex on the way it is set up, so it takes a fair bit of time in order to get your head around it in order to deploy it. Once you've deployed it, then you're never confident on the versions of the browsers and the SSL certificates, etc. You have to always go back into Qualys and check."

"The solution is a bit expensive if you do not have access to discounts."

More Qualys VMDR cons

"The solution needs to improve the reporting and tracking capabilities."

"They could improve the UI."

"I would like to have more integrations and custom plugins to input. Integration is always a big deal in a lot of different environments."

"Most of the time, agent-relative issues have to be more equipped with self-healing features. At times, the agent is there, but for some reason, it doesn't report a status. It gives certain problems that are obviously agent-based."

"We had some issues with the solution's OS upgrade."

"It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model."

"The reporting could be improved."

"Tanium’s scalability could be improved."

More Tanium cons

Pricing and Cost Advice

"The solution is expensive."

"There is a license for the use of this solution. We pay annually instead of monthly to receive a better discount on the price."

"It is a high cost product. Compared to the other solutions, it is around 15 to 20% higher in cost."

"There are no additional fees in addition to the standard licensing fees."

"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."

"The pricing is very competitive."

"The solution is costly."

"It is more expensive than other products on the market."

More Qualys VMDR pricing and cost advice

"There is an annual license required to use this solution."

"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."

"The product's pricing differs from region to region depending on negotiations and the number of endpoints."

"It's an expensive solution. It would be nice if the cost were lower."

"The solution is expensive but it's a good investment."

"The solution offers value for money."

"It is higher than some competitors in the market."

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

36%

Financial Services Firm

10%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

17%

Government

13%

Computer Software Company

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your primary use case for Qualys VM?

Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

What is your experience regarding pricing and costs for Qualys VMDR?

For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.

What do you like most about Tanium?

Tanium’s linear-chain architecture is valuable.

What needs improvement with Tanium?

The reporting could be improved.

What is your primary use case for Tanium?

We collect end-point data. We use it to make AI models and provide it to customers. I use Tanium’s sensors, collect data, and develop dashboards. The sensors have many data types. If we need differ...

Tenable Nessus vs Qualys VMDR

Comparisons

Compared 18% of the time

Rapid7 InsightVM vs Qualys VMDR

Compared 9% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 9% of the time

Tenable Security Center vs Qualys VMDR

Compared 7% of the time

ManageEngine Vulnerability Manager Plus vs Qualys VMDR

Compared 3% of the time

More Qualys VMDR Competitors

CrowdStrike Falcon vs Tanium

Compared 18% of the time

Microsoft Defender for Endpoint vs Tanium

Compared 10% of the time

Microsoft Configuration Manager vs Tanium

Compared 9% of the time

ServiceNow Discovery vs Tanium

Compared 7% of the time

Tenable Security Center vs Tanium

Compared 4% of the time

More Tanium Competitors

Product Reports

Download Qualys VMDR product report

Qualys VMDR

January 2025

Download Tanium product report

December 2024

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance

No data available

Learn More

Qualys

Overview

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Tanium Endpoint Platform reduces security risk, improves agility & increases efficiency, a fundamentally new approach to endpoint security's threat detection, indicent response, vulnerability assessment and configuration compliance & with management's software distribution, asset utilization, asset inventory and patch management.

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life