Qualys VMDR Reviews

Name: Qualys VMDR
Brand: Qualys
Rating: 4.1 (91 reviews)

Vendor: Qualys

4.1 out of 5

91 reviews
94% willing to recommend

3,323 followers

Post review

What is Qualys VMDR?

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Get the Qualys VMDR Buyer's Guide and find out what your peers are saying about Qualys VMDR, Wiz, Tenable Nessus and more!

Qualys VMDR is the #2 ranked solution in top Vulnerability Management solutions, #3 ranked solution in top Configuration Management Databases, #3 ranked solution in top Risk-Based Vulnerability Management solutions, #4 ranked solution in top IT Asset Management solutions, and #10 ranked solution in Container Security Solutions. PeerSpot users give Qualys VMDR an average rating of 8.2 out of 10. Based on the analysis of the 91 most recent Qualys VMDR reviews, the overall sentiment is positive, with a sentiment score of 7.1. Qualys VMDR is most commonly compared to Wiz: Qualys VMDR vs Wiz. Qualys VMDR is popular among the midsize enterprise segment, accounting for 43% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 35% of all views.

Helped 816,406 peers since 2012

Featured reviews

Harold Jensen

Senior Cybersecurity Engineer at 3M Health Information Systems

Cloud Agents: lots of control available and very trouble-free. It pulls all systems information, including installed software and open ports. It's very configurable to adjust impact to systems. Connectors: Pulls all the cloud information per account and helps to build a CMDB. Qualys connectors do some control evaluations to help manage these accounts. Global Asset View (GAV): With the ability to establish dynamic tagging and perform queries GAV has become a very valuable research tool to our teams.

Read full review

Koketso Ditlhage

Information Communication Technology Specialist at UNIVERSITY OF JOHANNESBURG

We integrate Qualys VMDR with our infrastructure, conducting weekly scans and generating reports based on the findings. This provides daily views of vulnerabilities, and we use Qualys' patch management to deploy patches promptly, starting with the most severe vulnerabilities, thus reducing our threat exposure. Conducting a thorough proof of concept is essential to evaluate its effectiveness in your environment and to see how it integrates with your existing systems and handles your specific security needs. I rate it a ten out of ten.

Read full review

Venkata Kalla

Information & security engineer at Infosys

We use continuous monitoring to schedule scans for all the applications in our organization. We create a parent tag and sub-tags for each application and schedule scans based on our requirements, such as every alternate day, weekly, or monthly. This helps us identify vulnerabilities in the web…

Read full review

Qualys VMDR mindshare

Product category:

As of November 2024, the mindshare of Qualys VMDR in the Vulnerability Management category stands at 12.2%, down from 13.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Vulnerability Management

Key learnings from peers

Last updated Nov 19, 2024

Valuable Features

Qualys VMDR's standout features include its robust vulnerability management, real-time threat detection, and automatic patching capabilities. Users appreciate the intuitive interface, seamless cloud deployment, and comprehensive dashboard. The continuous monitoring and asset management tools are praised for enhancing security posture. Its integration with various platforms offers flexibility, while customizable reports and tagging improve operational efficiency. The platform's ability to provide detailed insights on vulnerabilities and prioritization is highly regarded for effective risk mitigation.

"Overall, the solution is highly rated because of its simplicity and efficiency."
"It allowed us to divide tasks easily among teammates, significantly improving efficiency."
"Using this product, we now have a vulnerability management cycle wherein VMDR plays a major role."

Room for Improvement

Qualys VMDR's cloud dependence presents challenges for small firms. Users report difficulties with reporting, asset management, and user interface complexity. The database sometimes misidentifies vulnerabilities, and patch identification isn't always accurate. Integration with other tools and providing automatic patching requires improvement. High pricing and technical support response times are concerns. Users desire improved machine learning capabilities, better dashboard customization, and enhanced cloud and multi-cloud support. False positives and a lack of intuitive tools hinder user experience.

"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."
"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."
"The response time of technical support takes a while."

ROI

Many organizations experienced substantial benefits with Qualys VMDR. Frequent scans increased threat detection, reducing potential security risks and fostering improved security postures. Enhanced vulnerability management and streamlined patch processes saved time and resources. A significant number noticed a financial return, citing improvements like reduced vulnerability footprints and decreased breaches. This proactive security approach provided clarity on assets and vulnerabilities. Despite concerns over cost escalation, many valued the reduced risk and efficiency gains.

Pricing

Qualys VMDR pricing varies significantly depending on the organization and scope, with costs potentially exceeding $100,000 annually without discounts. Users often find it competitive yet higher compared to competitors like Tenable and Nessus. Discounts are available, and negotiations can improve pricing. Licensing typically follows a yearly model based on asset count, and additional features may incur extra costs. Larger enterprises may find the cost justifiable due to comprehensive features, while smaller companies may find it expensive.

"The solution is reasonably priced for the value it provides."
"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."
"The product is more expensive than that of any other vendor."

Popular Use Cases

Organizations primarily use Qualys VMDR for managing vulnerabilities, conducting web application scans, and ensuring policy compliance across various environments, including cloud and on-premises systems. It supports vulnerability detection, asset inventory, and comprehensive risk management. Users deploy it for security assessments of internal and external systems, container security, and network infrastructure scanning. Deployments include extensive use of cloud agents and scanners, enabling real-time identification of vulnerabilities for prioritization and remediation.

Service and Support

Qualys VMDR customer service is rated high, with quick responses and excellent support in many regions, although some find response times slow. Technical support is generally positive, helpful, and responsive, often through forums, but experiences vary with some suggesting improvements in response time and guidance. Dedicated teams provide efficient service, although escalation is sometimes necessary. Feedback highlights both impressive responsiveness and occasional delays in resolving issues, impacting customer satisfaction differently.

Deployment

Qualys VMDR's initial setup is generally considered straightforward, with users finding it easy, especially for cloud-based configurations. Some complexities arise depending on network architecture or the need for integration. Most found agent deployment simple, but some required additional training or faced challenges due to organization-specific needs. Many praised the clear documentation and support provided during deployment, making it accessible even with varying levels of technical knowledge.

Scalability

Qualys VMDR's scalability is highly regarded, with users noting ease in expanding resources and handling large networks. Its cloud-based nature enhances flexibility, allowing deployments across multiple locations. Most users report no problems in scaling, even with thousands of assets. However, some mention cost increases with scale and challenges with industrial control systems. Ratings often fall between eight and ten, reflecting a positive reception toward its ability to support diverse organizational needs.

Stability

Qualys VMDR is generally stable with minimal issues. Many users report high reliability, emphasizing strong performance and little to no downtime. Occasional bugs have been noted, particularly with reporting features, but these are swiftly addressed. While a few have encountered minor connectivity problems, these were often related to local issues rather than VMDR. Most rate its stability between eight and nine out of ten, appreciating its ability to manage vulnerabilities effectively.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys VMDR Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Educational Organization

35%

Computer Software Company

11%

Financial Services Firm

10%

Manufacturing Company

Government

Healthcare Company

Retailer

University

Insurance Company

Energy/Utilities Company

Comms Service Provider

Media Company

Non Profit

Construction Company

Wholesaler/Distributor

Real Estate/Law Firm

Hospitality Company

Transportation Company

Legal Firm

Outsourcing Company

Logistics Company

Performing Arts

Pharma/Biotech Company

Recreational Facilities/Services Company

Consumer Goods Company

Compare Qualys VMDR with alternative products

Learn more about Qualys VMDR

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Qualys VMDR was previously known as Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security, Qualys Virtual Scanner Appliance.

Product Video

Qualys VMDR customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx