Try our new research platform with insights from 80,000+ expert users

Qualys VMDR pros and cons

Vendor: Qualys

4.2 out of 5

93 reviews
94% willing to recommend

3,325 followers

Pros & Cons summary

Qualys VMDR excels in real-time detection and reporting for strong security posture, offering automated patch management and integrated threat intelligence for effective prioritization. Continuous monitoring and agent-based scanning enhance security operations, while integration with platforms like ServiceNow streamlines workflows. Challenges include cloud-only data storage, API speed, and integration limitations. Despite its cost, users find its asset management and vulnerability identification occasionally inaccurate, calling for enhanced scalability and accuracy.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Qualys VMDR provides continuous monitoring with automated, regular network scans and vulnerability detection, ensuring robust security posture.

The integration with threat intelligence enhances vulnerability assessment, prioritizing vulnerabilities based on threat levels and potential impacts.

Patch management capabilities, including automatic remediation, play a critical role in maintaining updated security measures.

Qualys VMDR offers seamless integration with third-party tools and services, optimizing the security workflow through enhanced connectivity.

The comprehensive vulnerability management and detection features are vital for identifying and addressing vulnerabilities effectively.

CONS

Qualys VMDR's integration with third-party applications, including ServiceNow, can be complicated and requires improvement.

Qualys VMDR's vulnerability identification can result in false positives and inaccuracies, leading to issues during audits.

Qualys VMDR's pricing is considered expensive compared to other similar tools on the market, especially when discounts are unavailable.

Qualys VMDR's customer support and technical assistance need improvements, particularly in response times and issue resolution.

Qualys VMDR lacks certain compliance and customization options required by various Middle Eastern standards and frameworks.

Qualys VMDR Pros review quotes

LG

Works at Coforge Growth Agency

Sep 9, 2024

It's also highly customizable, allowing us to tailor it to our needs.

Read full review

reviewer1708782

Senior Security Consultant at a tech services company with 10,001+ employees

Nov 1, 2021

The most recent is VMDR, which provides a comprehensive overview of how to detect, patch, and remediate specific vulnerabilities.

Read full review

Sr. Vice President Group Security at a financial services firm with 10,001+ employees

Sep 9, 2024

It gives you a lot of options, and it integrates with our ServiceNow for ticketing and all.

Read full review

Free Report: Qualys VMDR Reviews and More

Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.

842,388 professionals have used our research since 2012.

reviewer1324734

Information Security Manager at a outsourcing company with 51-200 employees

Jul 9, 2022

The reporting functionality is great.

Read full review

reviewer1675638

Cyber Security Director at a manufacturing company with 5,001-10,000 employees

Sep 22, 2021

The initial setup is straightforward.

Read full review

AZ

Assistant Manager Solutions at Mutex Systems Pvt. Ltd.

Jul 6, 2022

I find Qualys VM very robust, and it's very useful for vulnerability management and patch management. The value that it brings to my environment is economies of scale. There is no limitation on adding any endpoints. You go by the rule, and it's added once another endpoint is added to our environment. It's automatically installed, and it's less work from our end. It frees up my license automatically if I don't need an endpoint or if my machine is decommissioned. I like the dashboard displays because I don't see any duplication. The most important part is vulnerability management and prioritization. Unlike Symantec, it shows the kind of vulnerability I would want to patch first. It provides a holistic view of the kind of vulnerabilities and the ones I should remediate first. I don't have to do a scan; it just brings up those critical kinds of vulnerabilities like zero-day vulnerabilities and tells me to prioritize them. You have to prioritize these vulnerabilities first and go on with the rest. The dashboard shows me the ones that have been fixed, so I don't have to complete an aging report. The user experience and the graphical interface are good. As it's user-friendly and understandable on an executive level, it brings real value. We also use this solution because it's robust and flexibile.

Read full review

Senior Cybersecurity Engineer at 3M Health Information Systems

Jul 13, 2023

It's very configurable to adjust impact to systems.

Read full review

Head: Cloud Platform Security at BCX Namibia

Aug 8, 2023

The biggest benefit is from a security operations perspective, where we are able to drive our security posture upwards by remediating any discovered vulnerabilities.

Read full review

Senior Global IT Security Specialist at a manufacturing company with 1,001-5,000 employees

Sep 18, 2024

The most valuable features of Qualys VMDR include patch management and the use of virtual scanners to scan appliances and devices, especially those provided by vendors where we cannot manage them ourselves.

Read full review

ITSM & AntiFraud Consultant at a tech company with 51-200 employees

May 16, 2017

Vulnerability management is the most valuable one and it’s a must in every organization.

Read full review

Show 10 more reviews (out of 75)

Qualys VMDR Cons review quotes

LG

Works at Coforge Growth Agency

Sep 9, 2024

In terms of improvement for the web application console, in the older version, things were more segregated and presented in a brief format.

Read full review

reviewer1708782

Senior Security Consultant at a tech services company with 10,001+ employees

Nov 1, 2021

Qualys currently does not have any features for scanning SCADA, IoT, and Industrial Control Systems.

Read full review

Sr. Vice President Group Security at a financial services firm with 10,001+ employees

Sep 9, 2024

From the application security perspective, Qualys has a way to go.

Read full review

Free Report: Qualys VMDR Reviews and More

Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.

842,388 professionals have used our research since 2012.

reviewer1324734

Information Security Manager at a outsourcing company with 51-200 employees

Jul 9, 2022

They're still evolving their platform in terms of reporting capabilities.

Read full review

reviewer1675638

Cyber Security Director at a manufacturing company with 5,001-10,000 employees

Sep 22, 2021

The solution is a bit expensive if you do not have access to discounts.

Read full review

AZ

Assistant Manager Solutions at Mutex Systems Pvt. Ltd.

Jul 6, 2022

The price could be better. Asset view is still a legacy feature. I'm not able to extract the information about the asset with complete details. It would be better if they fixed that in the next release. I know Qualys is already working on it, so I'm hopeful it will be available in the next five or six months. That would be something that's changed where I seek improvement.

Read full review

Senior Cybersecurity Engineer at 3M Health Information Systems

Jul 13, 2023

There seems to be a lack of easy onboarding into Qualys.

Read full review

Head: Cloud Platform Security at BCX Namibia

Aug 8, 2023

If anything, I would like to see the user interface modernized a bit more.

Read full review

Senior Global IT Security Specialist at a manufacturing company with 1,001-5,000 employees

Sep 18, 2024

One area for improvement is the simplification of the process to ignore certain vulnerabilities on specific devices.

Read full review

ITSM & AntiFraud Consultant at a tech company with 51-200 employees

May 16, 2017

One of the biggest issues from the clients' perspective is that all Qualys computing is on the cloud.

Read full review

Show 10 more reviews (out of 74)

Related questions

15

Qualys VM vs Tenable Nessus: Comparison

39

How does Tenable Nessus compare with Qualys VM?

203

How does Pentera compare with Qualys VMDR?

32

What are the main differences between Qualys VMDR and Tenable Nessus?

55

How inadvisable is it to use a single vulnerability analysis tool?

41

What are the benefits of continuous scanning for vulnerability management?

24

When evaluating Vulnerability Management, what aspect do you think is the most important to look for?

21

What is a more effective approach to cyber defense: risk-based vulnerability management or vulnerability assessment?

177

What are the main KPIs that need to be implemented to have better posture in vulnerability projects?

111

Which is the best vulnerability scanner tool?