Try our new research platform with insights from 80,000+ expert users

Qualys VMDR vs XM Cyber comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys VMDR
Ranking in Vulnerability Management
2nd
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
92
Ranking in other categories
IT Asset Management (4th), Configuration Management Databases (2nd), Container Security (12th), Risk-Based Vulnerability Management (3rd)
XM Cyber
Ranking in Vulnerability Management
29th
Average Rating
8.0
Reviews Sentiment
7.8
Number of Reviews
2
Ranking in other categories
Cloud Security Posture Management (CSPM) (26th), Continuous Threat Exposure Management (CTEM) (2nd)
 

Mindshare comparison

As of January 2025, in the Vulnerability Management category, the mindshare of Qualys VMDR is 11.1%, down from 13.7% compared to the previous year. The mindshare of XM Cyber is 1.6%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management
 

Featured Reviews

Harold Jensen - PeerSpot reviewer
Good visibility but expensive and needs better support
Support: It's often overseas and often following a script, basically asking us to redo what we opened the case with. Multiple APIs: There seems to be a lack of easy onboarding into Qualys. We had to use manual inputs and some API calls to get items in place. Dashboard: It is very rudimentary with very little customization. The Qualys Scripting Language (QSL) works differently in different Qualys modules, so when you get it working in one area you have to modify the syntax in others. User account management: We often have to give users more rights than needed just to give them what they need. Integration with the various Qualys Modules: You can tell the UI is different based on of the different teams that created them. QSL syntax same in all modules Responsiveness of some of the components: They time out, you get a blank screen, etc. Backend updates between the various modules: You update connectors and information takes a few minutes to show in VMDR or Global Asset View Connectors: Connectors have a throttling issue with AWS which causes them to frequently fail unless you manually run them again.
HolgerHeimann - PeerSpot reviewer
Reliable with no false-positives and helpful support
There's a lot of improvement possible, however, most of it is in the details. I personally like the concept, as it's pretty straightforward and the product is not trying to overload functionality. It's a clean and straightforward approach. You know what you get. Most of the improvements are detail improvements. They're pretty open to future requests as well, so we send them a lot of suggestions. For example, at the moment, they have something called Battleground. That's a visualization of the network, and it's a visualization of the attack paths that are possible. The program uses so-called scenarios, and we say, "Okay, I'm watching traffic for maybe 24 hours," and then you get a result for that scenario, what happens in that time with what the attack paths are, et cetera. The result of the same scenario yesterday or tomorrow may be different as something might change. In that, one of the things I'm currently missing, which is on the list to be added, is some kind of diff visualization. For example, showing a two-screen split of activity. On the left side of the screen, that's how it was yesterday; on the right side, that's how it is today; and here are the differences. We'd like to see a cheaper price.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Tech support is helpful."
"I am impressed with the VMDR feature."
"The best features of Qualys VMDR are its patch management capabilities and the ability to mitigate vulnerabilities automatically."
"Using this product, we now have a vulnerability management cycle wherein VMDR plays a major role."
"It is very easy to use and there are lots of options. We can usually easily go through it and all of the things we want to configure, and we can configure everything to our specifications very easily."
"It is a simple solution that makes scanning easy. You just give it a scheduled task, and it will do everything for you."
"Overall, the solution is highly rated because of its simplicity and efficiency."
"Detects new hosts along with vulnerabilities."
"What I personally like very much, from my experience, is that it is very reliable."
"The platform's most valuable feature is attack simulation."
 

Cons

"Qualys Container Security can improve the interface. It could be easier to navigate and be enriched."
"Qualys VMDR is basically susceptible to false positives, and false negatives."
"It would be nice to have an all-in-one solution that was automated and could handle the scanning and reports as well as the patching and updating."
"It is a struggle to be able to pull our report and to be able to do onboarding using automated tools."
"There needs to be better documentation."
"I would like to see this solution more developed and competitive in the Cloud space."
"Qualys should improve their customer experience. They need to improve the tech support experience and the turnaround time."
"I would like to have CSPM, a continuous scan-like cloud added to the solution."
"We'd like to see a cheaper price."
"XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas."
 

Pricing and Cost Advice

"The solution is expensive."
"The license is on a yearly basis."
"The product is more expensive than that of any other vendor."
"Qualys is a pay-as-you-go model, so there's flexibility to the pricing."
"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."
"The pricing is very competitive."
"An annual license for a single scanner costs around $3,000."
"It is different for every company, but for us, it's every three years."
"We have to pay standard licensing fees."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
36%
Computer Software Company
10%
Financial Services Firm
10%
Manufacturing Company
6%
Computer Software Company
15%
Financial Services Firm
13%
Manufacturing Company
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your primary use case for Qualys VM?
Qualys VM is used for vulnerability scans for the internet and applications using application exchange. There are many applications. We also use the solution for asset management per team, and the ...
What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...
What is your experience regarding pricing and costs for Qualys VMDR?
For smaller enterprises, the pricing is on the pricier side. However, for larger enterprises, it's considered okay. I would rate the pricing between seven to eight out of ten.
What do you like most about XM Cyber?
The platform's most valuable feature is attack simulation.
What is your experience regarding pricing and costs for XM Cyber?
We have to pay standard licensing fees. There are no additional costs. It is an expensive product. I rate the pricing a seven out of ten.
What needs improvement with XM Cyber?
XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.
 

Comparisons

 

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance
No data available
 

Learn More

 

Overview

 

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
Hamburg Port Authority, Plymouth Rock Corporation
Find out what your peers are saying about Qualys VMDR vs. XM Cyber and other solutions. Updated: January 2025.
831,020 professionals have used our research since 2012.