Qualys CyberSecurity Asset Management (CSAM) Reviews

Name: Qualys CyberSecurity Asset Management (CSAM)
Brand: Qualys
Rating: 5 (6 reviews)

4.6 out of 5

6 reviews
100% willing to recommend

What is Qualys CyberSecurity Asset Management (CSAM)?

Qualys CyberSecurity Asset Management (CSAM) provides industry-leading coverage of the internal and external attack surface (EASM), along with comprehensive cyber risk assessment, natively-integrated with Qualys Vulnerability Management, Detection, and Response (VMDR).

Get the Qualys CyberSecurity Asset Management (CSAM) Buyer's Guide and find out what your peers are saying about Qualys CyberSecurity Asset Management (CSAM), CrowdStrike Falcon, Tanium and more!

Qualys CyberSecurity Asset Management (CSAM) is the #4 ranked solution in top Cyber Asset Attack Surface Management (CAASM) solutions, #5 ranked solution in top Attack Surface Management (ASM) solutions, #7 ranked solution in top Software Supply Chain Security solutions, #10 ranked solution in top Patch Management solutions, and #14 ranked solution in top Vulnerability Management solutions. PeerSpot users give Qualys CyberSecurity Asset Management (CSAM) an average rating of 9.2 out of 10. Based on the analysis of the 6 most recent Qualys CyberSecurity Asset Management (CSAM) reviews, the overall sentiment is positive, with a sentiment score of 6.8. (The highest in the category). Qualys CyberSecurity Asset Management (CSAM) is most commonly compared to CrowdStrike Falcon: Qualys CyberSecurity Asset Management (CSAM) vs CrowdStrike Falcon. Qualys CyberSecurity Asset Management (CSAM) is popular among the large enterprise segment, accounting for 56% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 27% of all views.

Buyer's Guide

Qualys CyberSecurity Asset Management (CSAM)

October 2024

Get the report

Helped 814,325 peers since 2012

Featured reviews

Brad Mathis

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

The external attack surface management identified unexpected assets, suggesting some exist outside our known inventory. While these may not be directly managed by us, the process has brought valuable awareness to the fact that our core servers are externally hosted, prompting a review of similar situations. An external attack surface management scan revealed several outsourced name services, along with one unexpected third-party-linked IP. It's unclear if this was due to past consulting work or a registration error, but since it wasn't relevant to our company, it was easily excluded from future scans. The benefits of Qualys CyberSecurity Asset Management are immediate. We already had the cloud agents installed. They were already on all the servers and workstations. Once we upgraded from the VMDR included GAV (Global AssetView) to CSAM, it was no time before I could see the end-of-life, end-of-service software, and hardware. In addition to vulnerabilities, CSAM provides a better view of other risk factors, but VMDR is very powerful. VMDR was already seeing our limitations in hardening our vulnerabilities. CSAM enhanced our view by adding more visibility and insight into what we have. TruRisk scoring goes beyond traditional vulnerability scoring like CVSS to prioritize both vulnerabilities and assets based on real-world exploitability and industry targeting. This provides a clearer picture of our actual risk by considering factors like published exploits and what attackers are currently focusing on, allowing us to quickly identify critical issues and avoid wasting time on vulnerabilities with a high theoretical risk but low real-world threat. Qualys Cloud Agents can now be configured as passive sensors to discover all devices on our network in real-time, eliminating the requirement for separate virtual or physical passive sensor appliances. These cloud agent sensors monitor network broadcasts instead of egress traffic, and they can even designate a secondary sensor to take over if the primary becomes unavailable, ensuring continuous asset discovery and populating our CSAM platform with managed and unmanaged devices.

Read full review

Vaibhav_Kumar

Analyst III - Information Security and Compliance at a financial services firm with 201-500 employees

The external attack surface refers to the externally visible endpoints hosted by any company. External scanning can be performed to identify the number of publicly-facing assets. CSM provides functionality to scan these external assets, and based on the scanning results, patching can be performed to address any identified vulnerabilities. The best part about Qualys CSAM is that it continuously pulls data. We can either install a cloud agent on all our machines or use IP wave scanning to identify the IP subnet. Qualys CSAM will identify any machine that spins up within that IT subnet during its scheduled scans. Once it finds a new machine within the subnet, it will register it as a new asset and populate it on the dashboard. Qualys CyberSecurity Asset Management was able to identify an additional 50 to 100 assets that were not part of our vulnerability management program. The key functionality of CSAM is a new feature update that Qualys releases periodically. It provides organizations and IT professionals with key metrics to understand how assets behave within their infrastructure, addressing the issue of unfamiliarity. CSAM focuses on efficacy, efficiency, and improved asset tracking. Better asset tracking enhances security posture, enabling timely patching and streamlining the entire vulnerability management lifecccccycle. Asset management is the first phase, and when asset tracking is simplified, the entire vulnerability management cycle becomes easier. When discussing additional risk factors, CSAM provides crucial insights into the nature of the host, including basic information like hostname, IP address, operating system, installed applications, initial discovery date by Qualys, and current online/offline status. Leveraging risk factors like initial discovery date and the presence of malicious or outdated applications allows for collaboration with patch management teams to assess machine compliance. Effective asset management lifecycle practices empower organizations to comprehensively address many risk factors. The True Risk Scoring was accurate. While false positives are always possible, they were minimal in Qualys, making it nearly perfect. I have leveraged active and passive sensors, such as Qualys Cloud Agent models, to gain better visibility into our assets. Qualys will send a probe whenever we have passive sensors and an established IP connection. This probing timeline indicates how frequently the network needs to be probed—for example, every 30 minutes. Based on the timeline, the sensor will probe the entire IP range and detect any new machines that appear, improving our visibility.

Read full review

Sangram Gupta

Cyber Risk Advisory – Consultant at Deloitte

I have four years of experience in cybersecurity, and I have used a lot of tools. Qualys CyberSecurity Asset Management has some advantages over others. The first one is a feature called dynamic tag. When you implement a dynamic tag using a query, you do not need to manually tag all the servers. It categorizes all the servers that come under that query. The tagging part is automatically done within a few minutes. It reduces the effort. The second feature is a feature called Asset Purge Rule. For example, there might be some servers or products that have not been used for the last 90 or 120 days. If they are still being reported in Qualys, it will be difficult to prioritize the servers or products to determine the top ten vulnerable servers or products. Previously, if we wanted to purge those assets or remove them from scanning, we had to do that manually, whereas Qualys CyberSecurity Asset Management provides a feature for that. We do not need to do anything from our side. A server older than the last 90 days will automatically get purged or removed from the account or scanning scope. Whenever we generate the scan report, there will be only assets or servers that are reporting in Qualys. The ones that are not reporting are automatically purged. This is known as data sanitization or vulnerability report sanitization. This is done by Qualys CSAM through the Asset Purge Rule feature. These are its core features for me.

Read full review

Qualys CyberSecurity Asset Management (CSAM) mindshare

Product category:

As of October 2024, the mindshare of Qualys CyberSecurity Asset Management (CSAM) in the Cyber Asset Attack Surface Management (CAASM) category stands at 3.2%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cyber Asset Attack Surface Management (CAASM)

Key learnings from peers

Last updated Oct 29, 2024

Valuable Features

Qualys CyberSecurity Asset Management offers valuable features like cloud agent insights, robust inventory management, automatic tagging with dynamic tags, and Asset Purge Rule for data sanitization. Comprehensive external attack surface management enhances security posture. The integration of passive sensors and IP scanners aids in real-time risk monitoring. The platform excels in detailed asset discovery and categorization, providing useful metrics on operating systems and applications, while facilitating seamless vulnerability remediation processes for IT teams.

"Qualys CSAM helps find all the assets. It categorizes information based on various criteria such as host and tenant version. It provides in-depth visibility into both hardware and software."
"The best feature is asset discovery through their cloud agent or IP-based scanning."
"The most valuable aspect we receive from Qualys is the remediation."

Room for Improvement

Qualys CyberSecurity Asset Management needs integration with more CMDB options, cost reduction, improved scan frequency control, and better report customization. CPU consumption and cloud auto-scaling challenges need attention. A simpler interface and enhanced navigation would aid usability, while tagging and dynamic grouping require improvement. Integration with other tools and a robust knowledge base are necessary. Users desire specific remediation recommendations and context for vulnerabilities. Enhanced software composition analysis and flexibility in filtering export data are expected.

"From the user experience perspective, we need a simpler interface and reduced complexity in certain features, particularly with the Qualys Query Language."
"In our reporting, we faced a challenge syncing with cloud devices."
"Currently, whenever the agent is running, it consumes over ten percent of my CPU, indicating that CPU consumption is another area Qualys needs to address."

ROI

Users experienced a significant return on investment in terms of improved security, enhanced visibility and control over assets, and effective risk mitigation.

The solution proved to be highly valuable in identifying vulnerabilities, implementing necessary patches, and ensuring compliance. It streamlined processes, saved time, and provided actionable insights for informed decision-making.

Pricing

Qualys CyberSecurity Asset Management pricing can be perceived as expensive, particularly for organizations with fewer assets. It offers a comprehensive tool that consolidates various solutions into a single license, providing excellent value for larger enterprises. Users find the pricing model fair, transparent, and flexible, allowing tailored solutions. While some perceive the cost as high, others appreciate its competitive pricing against similar products, emphasizing the need for packages better suited for smaller organizations.

"Qualys is competitively priced for its features. Its pricing is suitable for large organizations with more than 4,000 assets, but for smaller organizations with few assets, such as banks, the costs might be high. They should come up with packages that are suitable for small organizations."
"Qualys offers excellent value for money."
"The cost for Qualys CyberSecurity Asset Management is high."

Popular Use Cases

Organizations primarily use Qualys CyberSecurity Asset Management for managing technical debt, identifying end-of-life software and hardware, and improving asset tracking. It enables users to categorize and tag assets, manage zero-day vulnerabilities, and gain visibility into their asset inventory. By enhancing asset visibility, users can minimize security risk and implement necessary security measures to protect against threats. Qualys CSAM aids in license management, asset inventory discovery, and ensures no asset goes unmanaged.

Service and Support

Qualys CyberSecurity Asset Management (CSAM) shines in customer service and support. Users experience prompt assistance from knowledgeable teams capable of resolving complex issues efficiently. Feedback mechanisms enhance communication. Alongside responsive technical support, a robust knowledge base and helpful documentation contribute to effective problem resolution. While some complex issues may require more time, strong community and forum support further empower users, ensuring a comprehensive support experience.

Deployment

Deployment of Qualys CyberSecurity Asset Management (CSAM) is straightforward, especially for VMDR users. Setup is quick, typically handled by one person. Using cloud agents, passive sensors, and automated modules simplifies asset management. Good documentation aids deployment, though additional support may be needed. Transition to the cloud is smooth. Timeframes vary by network complexity; experienced professionals assist in accelerating the process. Some users find setup moderately challenging, suggesting enhanced tutorials for clarity.

Scalability

Qualys CyberSecurity Asset Management is known for its effective scalability across diverse environments. It efficiently manages deployments from small to large-scale, accommodating a wide range of device counts. Users have emphasized its seamless scaling capabilities and rated its scalability highly. It is operational in multiple international locations and supports different user groups, with plans for expansion. The capability to handle different sizing needs is appreciated by users.

Stability

Qualys CyberSecurity Asset Management demonstrates strong reliability and stability. Users mention rare syncing issues post-updates typical for cloud applications, with some queries crashing occasionally. Support cases vary in resolution time. Ratings for stability range from seven and a half to nine out of ten, with some experiencing occasional network-induced delays. The platform is stable most of the time, providing consistent performance, valued by multiple users for dependable functionality.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys CyberSecurity Asset Management (CSAM) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

27%

Government

12%

Financial Services Firm

10%

Non Profit

Retailer

Manufacturing Company

Comms Service Provider

Healthcare Company

Insurance Company

Construction Company

Educational Organization

Energy/Utilities Company

Real Estate/Law Firm

Wholesaler/Distributor

Hospitality Company

Legal Firm

Logistics Company

Marketing Services Firm

Media Company

Pharma/Biotech Company

Leisure / Travel Company

Compare Qualys CyberSecurity Asset Management (CSAM) with alternative products

Learn more about Qualys CyberSecurity Asset Management (CSAM)

CSAM solidifies attack surface coverage and turbocharges vulnerability management with:

Comprehensive discovery of IT, IoT/OT, and rogue assets, internet-facing assets from mergers and subsidiaries, and business context from third-party connectors
Risk factors such as EoL/EoS software, missing security controls, unsanctioned ports, and expired SSL certs to show the TruRisk of every asset
Bi-directional CMDB sync to push cyber risk context to IT’s source of truth and pull business context into your security program