Try our new research platform with insights from 80,000+ expert users

Qualys Patch Management pros and cons

Vendor: Qualys

4.4 out of 5

27 reviews
96% willing to recommend

Pros & Cons summary

Qualys Patch Management automates patch deployment, enhancing compliance and reducing risks, with efficient bandwidth management via Qualys Gateway Scanner. Although it supports scripting for registry and vulnerabilities, it lacks built-in driver updates, offering less patching than SCCM. Reporting provides valuable insights, yet struggles with accuracy issues. Challenges remain in supporting legacy systems and timely zero-day solutions, while high pricing limits affordability despite responsive customer service.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Qualys Patch Management excels in automation capabilities, significantly improving patch rates and ensuring compliance.

The integration of Qualys Gateway Scanner efficiently downloads and deploys patches, minimizing bandwidth usage.

Qualys Patch Management's support and customer service receive high praise for responsiveness and problem-solving.

The ability to automate patch deployment for numerous assets reduces the IT team's manual workload.

Qualys Patch Management leverages vulnerability feeds to effectively identify and remediate vulnerabilities.

CONS

Qualys Patch Management lacks built-in driver updates and shows limitations in available patches and deployment capabilities compared to alternatives like SCCM.

Qualys agent can encounter authorization issues, leading to inaccurate vulnerability reports, and detection logic sometimes inaccurately flags vulnerabilities.

Qualys Patch Management often requires OEM consent for certain patches and does not support Mac, legacy operating systems, or frequently add new software patches.

Pricing for Qualys Patch Management is high compared to other vendors, making it unaffordable for some companies.

There is room for improvement in how Qualys Patch Management communicates the process of knowing whether patches are completely downloaded in a QGS appliance.

Qualys Patch Management Pros review quotes

reviewer2590236

Information Security Lead at Infosys

Oct 31, 2024

Qualys Patch Management offers a valuable feature that allows for deferred reboots, giving users control while still ensuring eventual patching.

Read full review

ShantanuChoubal

Project Lead at Persistent Systems

Dec 11, 2024

The most valuable features of Qualys Patch Management include its ability to automate patch deployment for hundreds or thousands of assets, reducing our reliance on the IT team to perform these tasks manually.

Read full review

RO

Cybersecurity Engineer at a manufacturing company with 51-200 employees

Oct 18, 2024

Patch Management, if configured correctly, works effectively without requiring further action.

Read full review

Qualys Patch Management

Free Report: Qualys Patch Management Reviews and More

Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.

831,158 professionals have used our research since 2012.

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

Jun 10, 2024

The most valuable feature in Patch Management is the Qualys query language for set-it-and-forget-it patching for our preapproved patches, and our preapproved schedules, That is extremely helpful compared to the old days of patching.

Read full review

Seniour Security Consultant at CyberNxt Solutions LLP

Nov 5, 2024

The features I find most valuable in Qualys Patch Management include the ability to manage registry changes and run scripts both pre and post-patching. We have been able to apply workarounds for zero-day vulnerabilities efficiently.

Read full review

Yuvaraaj Adhithya

Cyber Security Analyst at WPP

Aug 20, 2024

For a few applications, you do not need to go and download the patches from the network or somewhere else. They have the patches or the latest updates in the directory. You can just select a patch and deploy it to a server. You can create a patch job and select the patch. Everything is within the interface. You do not need to go out of it.

Read full review

reviewer2589096

Senior Information Security Engineer at Infosys

Oct 30, 2024

Qualys Patch Management has significantly reduced our organizational risks.

Read full review

Revathi VeeraRaghavan

Senior Process Executive at Infosys

Dec 5, 2024

Qualys Patch Management offers numerous valuable features, including automatic patching for Google browsers, which allows for scheduled updates immediately upon vendor release.

Read full review

System Architect at a leisure / travel company with 10,001+ employees

Oct 17, 2024

Patch Management gave my side and the security side a single pane of glass and the ability to better coordinate the delivery of patches.

Read full review

reviewer2584884

Foundation Services Director at a leisure / travel company with 10,001+ employees

Oct 14, 2024

The most valuable features are the ease of managing both first-party and third-party patching, the generation of dashboards, and the provision of real-time information.

Read full review

Show 10 more reviews (out of 27)

Qualys Patch Management Cons review quotes

reviewer2590236

Information Security Lead at Infosys

Oct 31, 2024

Currently, there are limitations in downloading patch jobs to view all associated assets and patch statuses.

Read full review

ShantanuChoubal

Project Lead at Persistent Systems

Dec 11, 2024

It works with Windows and Linux, but Mac patch support is not yet available.

Read full review

RO

Cybersecurity Engineer at a manufacturing company with 51-200 employees

Oct 18, 2024

Qualys can do regular check-ins to go over not only all the vulnerabilities but also the overall process to see if there is anything where we might need improvement.

Read full review

Qualys Patch Management

Free Report: Qualys Patch Management Reviews and More

Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.

831,158 professionals have used our research since 2012.

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

Jun 10, 2024

A common area for improvement in Patch Management, both within our environment and others I've encountered, is the lack of built-in driver updates.

Read full review

Seniour Security Consultant at CyberNxt Solutions LLP

Nov 5, 2024

They need to improve the user-friendliness of identifying how many devices are affected by a particular patch. It is not intuitive, and there should be clearer indicators or buttons to access this information easily.

Read full review

Yuvaraaj Adhithya

Cyber Security Analyst at WPP

Aug 20, 2024

One of the challenges that we have faced with the Patch Management tool is that you cannot patch all the things. There are some limitations, whereas, in SCCM, we can create a package and just deploy that through it. Anything is deployable through SCCM, whereas Patch Management is very selective.

Read full review

reviewer2589096

Senior Information Security Engineer at Infosys

Oct 30, 2024

Qualys could improve its randomized download feature and provide more detailed information about patch failures, including the reason for failure.

Read full review

Revathi VeeraRaghavan

Senior Process Executive at Infosys

Dec 5, 2024

Reporting needs enhancement, particularly with group-based compliance percentages and clearer, VMDR-like reporting in the Patch Management module.

Read full review

System Architect at a leisure / travel company with 10,001+ employees

Oct 17, 2024

A patch contract is a bundle of patches that we are going to roll out. I would like to reference those patches from separate jobs. They explained at a conference that it cannot be done, but that is my main complaint. I wish that the whole schema was a little bit clearer because there is a little bit of cloudiness around it.

Read full review

reviewer2584884

Foundation Services Director at a leisure / travel company with 10,001+ employees

Oct 14, 2024

There is room for improvement in the detection logic. It sometimes detects open vulnerabilities that are not truly there, such as orphan files that are not really exploitable. It would be helpful if they were classified as information-only rather than Sev 4 or Sev 5.

Read full review

Show 10 more reviews (out of 27)

Product Categories

Product Categories

Patch Management

Popular Comparisons

Popular Comparisons

Microsoft Configuration Manager vs Qualys Patch Management

BigFix vs Qualys Patch Management

Kaseya VSA vs Qualys Patch Management

Microsoft Windows Server Update Services vs Qualys Patch Management

Automox vs Qualys Patch Management

ManageEngine Patch Manager Plus vs Qualys Patch Management

Ivanti Security Controls vs Qualys Patch Management

Patch My PC vs Qualys Patch Management

See all alternatives

Product Categories

Product Categories

Patch Management

Popular Comparisons

Popular Comparisons

Microsoft Configuration Manager vs Qualys Patch Management

BigFix vs Qualys Patch Management

Kaseya VSA vs Qualys Patch Management

Microsoft Windows Server Update Services vs Qualys Patch Management

Automox vs Qualys Patch Management

ManageEngine Patch Manager Plus vs Qualys Patch Management

Ivanti Security Controls vs Qualys Patch Management

Patch My PC vs Qualys Patch Management

See all alternatives

Related questions

105

Why is patch management important for cybersecurity?

12

When evaluating Patch Management, what aspect do you think is the most important to look for?

42

What patch management solution do you recommend?

43

What solution should we use for upgrading and patching OS to remediate vulnerabilities?

21

Why is Patch Management important for companies?

36

What are Pros and Cons of Cloud-based Patch Management?