Try our new research platform with insights from 80,000+ expert users

Qualys Patch Management pros and cons

Vendor: Qualys

4.3 out of 5

14 reviews
92% willing to recommend

Pros & Cons summary

Qualys Patch Management enables efficient, automated patching with preapproved patches and schedules, improving policy enforcement and security. It optimizes bandwidth via local patch downloads and reduces risks by managing vulnerabilities. The solution faces challenges with driver updates, virtual environments, and user-friendly reporting. Detection accuracy and zero-day vulnerability response require enhancement. Support services boost satisfaction despite limitations in visibility for downloaded patch jobs.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Qualys Patch Management uses automated patch scheduling and retrieval for efficient update processes.

Qualys Patch Management enhances security through set-it-and-forget-it patching for preapproved patches and schedules.

Qualys Patch Management offers robust reporting capabilities that provide valuable insights once users are accustomed to the system.

Policy enforcement in Qualys Patch Management minimizes manual oversight by enforcing updates after a set number of deferments.

Qualys Patch Management supports comprehensive vulnerability management by integrating with vulnerability feeds to identify and remediate risks.

CONS

Qualys Patch Management lacks built-in driver updates, which could limit its effectiveness in some environments.

The tool is selective in its patching capabilities compared to SCCM, which allows deployment of any package.

It faces challenges in fixing vulnerabilities on VMware and other virtualized environments.

There is an issue with the detection logic, leading to false positives on open vulnerabilities that could be classified as information-only.

Authorization issues with the Qualys agent sometimes lead to inaccurate vulnerability reports.

Qualys Patch Management Pros review quotes

reviewer2590236

Information Security Lead at Infosys

Oct 31, 2024

Qualys Patch Management offers a valuable feature that allows for deferred reboots, giving users control while still ensuring eventual patching.

Read full review

RO

Cybersecurity Engineer at a manufacturing company with 51-200 employees

Oct 18, 2024

Patch Management, if configured correctly, works effectively without requiring further action.

Read full review

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

Jun 10, 2024

The most valuable feature in Patch Management is the Qualys query language for set-it-and-forget-it patching for our preapproved patches, and our preapproved schedules, That is extremely helpful compared to the old days of patching.

Read full review

Qualys Patch Management

Free Report: Qualys Patch Management Reviews and More

Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.

816,406 professionals have used our research since 2012.

Yuvaraaj Adhithya

Cyber Security Analyst at WPP

Aug 20, 2024

For a few applications, you do not need to go and download the patches from the network or somewhere else. They have the patches or the latest updates in the directory. You can just select a patch and deploy it to a server. You can create a patch job and select the patch. Everything is within the interface. You do not need to go out of it.

Read full review

reviewer2589096

Senior Information Security Engineer at Infosys

Oct 30, 2024

Qualys Patch Management has significantly reduced our organizational risks.

Read full review

System Architect at a leisure / travel company with 10,001+ employees

Oct 17, 2024

Patch Management gave my side and the security side a single pane of glass and the ability to better coordinate the delivery of patches.

Read full review

reviewer2584884

Foundation Services Director at a leisure / travel company with 10,001+ employees

Oct 14, 2024

The most valuable features are the ease of managing both first-party and third-party patching, the generation of dashboards, and the provision of real-time information.

Read full review

SP

Sr Cyber Security Manager at BARC India

Nov 1, 2024

Qualys Patch Management offers valuable features like scheduling and on-demand patching, allowing us to conveniently push patches to our servers at designated times.

Read full review

reviewer2560884

SOC - Cyber Security Engineer at a computer software company with 201-500 employees

Sep 25, 2024

Qualys' best feature is its reporting. At first, it may seem a little complicated to a beginning user, but it's helpful once you get used to it. Most of these scans run automatically. We set the scans up for the client to run at daily, weekly, or monthly intervals, depending on how critical the server or other hardware is.

Read full review

Chaitanya Kajjam

Technical Lead - Security Operations at a tech services company with 51-200 employees

Nov 1, 2024

Qualys Patch Management excels with its automated patch scheduling and retrieval.

Read full review

Show 4 more reviews (out of 14)

Qualys Patch Management Cons review quotes

reviewer2590236

Information Security Lead at Infosys

Oct 31, 2024

Currently, there are limitations in downloading patch jobs to view all associated assets and patch statuses.

Read full review

RO

Cybersecurity Engineer at a manufacturing company with 51-200 employees

Oct 18, 2024

Qualys can do regular check-ins to go over not only all the vulnerabilities but also the overall process to see if there is anything where we might need improvement.

Read full review

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

Jun 10, 2024

A common area for improvement in Patch Management, both within our environment and others I've encountered, is the lack of built-in driver updates.

Read full review

Qualys Patch Management

Free Report: Qualys Patch Management Reviews and More

Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.

816,406 professionals have used our research since 2012.

Yuvaraaj Adhithya

Cyber Security Analyst at WPP

Aug 20, 2024

One of the challenges that we have faced with the Patch Management tool is that you cannot patch all the things. There are some limitations, whereas, in SCCM, we can create a package and just deploy that through it. Anything is deployable through SCCM, whereas Patch Management is very selective.

Read full review

reviewer2589096

Senior Information Security Engineer at Infosys

Oct 30, 2024

Qualys could improve its randomized download feature and provide more detailed information about patch failures, including the reason for failure.

Read full review

System Architect at a leisure / travel company with 10,001+ employees

Oct 17, 2024

A patch contract is a bundle of patches that we are going to roll out. I would like to reference those patches from separate jobs. They explained at a conference that it cannot be done, but that is my main complaint. I wish that the whole schema was a little bit clearer because there is a little bit of cloudiness around it.

Read full review

reviewer2584884

Foundation Services Director at a leisure / travel company with 10,001+ employees

Oct 14, 2024

There is room for improvement in the detection logic. It sometimes detects open vulnerabilities that are not truly there, such as orphan files that are not really exploitable. It would be helpful if they were classified as information-only rather than Sev 4 or Sev 5.

Read full review

SP

Sr Cyber Security Manager at BARC India

Nov 1, 2024

The GUI has areas that need improvement, particularly in the accuracy of results when adding dashboards and running queries.

Read full review

reviewer2560884

SOC - Cyber Security Engineer at a computer software company with 201-500 employees

Sep 25, 2024

Qualys could improve its capacity to fix vulnerabilities on VMware and other virtualized environments. The reporting could also be enhanced to make it more user-friendly. It's difficult for beginners to learn.

Read full review

Chaitanya Kajjam

Technical Lead - Security Operations at a tech services company with 51-200 employees

Nov 1, 2024

Qualys's current response time for releasing solutions to zero-day vulnerabilities, which takes approximately 12 to 16 hours, needs improvement.

Read full review

Show 4 more reviews (out of 14)

Product Categories

Product Categories

Patch Management

Popular Comparisons

Popular Comparisons

Microsoft Configuration Manager vs Qualys Patch Management

BigFix vs Qualys Patch Management

Kaseya VSA vs Qualys Patch Management

Microsoft Windows Server Update Services vs Qualys Patch Management

Automox vs Qualys Patch Management

ManageEngine Patch Manager Plus vs Qualys Patch Management

Ivanti Security Controls vs Qualys Patch Management

Patch My PC vs Qualys Patch Management

See all alternatives

Product Categories

Product Categories

Patch Management

Popular Comparisons

Popular Comparisons

Microsoft Configuration Manager vs Qualys Patch Management

BigFix vs Qualys Patch Management

Kaseya VSA vs Qualys Patch Management

Microsoft Windows Server Update Services vs Qualys Patch Management

Automox vs Qualys Patch Management

ManageEngine Patch Manager Plus vs Qualys Patch Management

Ivanti Security Controls vs Qualys Patch Management

Patch My PC vs Qualys Patch Management

See all alternatives

Related questions

139

Why is patch management important for cybersecurity?

9

When evaluating Patch Management, what aspect do you think is the most important to look for?

51

What patch management solution do you recommend?

34

What solution should we use for upgrading and patching OS to remediate vulnerabilities?

9

Why is Patch Management important for companies?

44

What are Pros and Cons of Cloud-based Patch Management?