Try our new research platform with insights from 80,000+ expert users
Network and security Pre-sales Engineer at a tech services company with 51-200 employees
MSP
A reliable, affordable, safe, scalable, and easy-to-use solution for vulnerability management and policy compliance
Pros and Cons
  • "There are many features. Its reliability, ease of installation, ease of use, and the richness of the information provided are the most valuable features."
  • "Its integration with ServiceNow and other similar products is complicated and can be improved. It should also have virtual batching. They should support more standards and compliance requirements and more customizations. For policy compliance, they can add the standards required by the countries in the Middle East. Each country generates its own standards and frameworks, and those frameworks should be there in all products, not only in Qualys. The market here is huge, especially in the cybersecurity field. Qatar has a framework for Qatar 2022, and each and every company in the public or private sector has to follow the Qatar 2022 framework."

What is our primary use case?

We are a system integrator. We implement Qualys for our customers for vulnerability management and policy compliance. We are not using Qualys as a product in our company. We have public, private, and hybrid cloud as well as on-premises deployments.

What is most valuable?

There are many features. Its reliability, ease of installation, ease of use, and the richness of the information provided are the most valuable features.

What needs improvement?

Its integration with ServiceNow and other similar products is complicated and can be improved. It should also have virtual batching.

They should support more standards and compliance requirements and more customizations. For policy compliance, they can add the standards required by the countries in the Middle East. Each country generates its own standards and frameworks, and those frameworks should be there in all products, not only in Qualys. The market here is huge, especially in the cybersecurity field. Qatar has a framework for Qatar 2022, and each and every company in the public or private sector has to follow the Qatar 2022 framework. 

For how long have I used the solution?

I have been using this solution for three years.

Buyer's Guide
Qualys VMDR
January 2025
Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
832,138 professionals have used our research since 2012.

What do I think about the stability of the solution?

Qualys is a reliable, strong, and solid product. 

What do I think about the scalability of the solution?

It is scalable. The main advantage of Qualys is that it is a cloud-based solution because of which you can scale it up or down according to your needs. It is very quick and flexible.

How are customer service and support?

Because we are in the Middle East, we deal with the office in Dubai. You cannot imagine how supportive they are. They are amazing in their response.

How was the initial setup?

The initial setup was easy. It has great hardware. Its deployment was easier than Rapid7, which is a bit complicated. Tenable is less complicated, but Qualys is faster and easier to deploy than Tenable. 

I deployed Qualys in two hours. It is easy to install, manage, and go through. There are multiple tabs, and everything is understandable.

What's my experience with pricing, setup cost, and licensing?

Qualys is cheaper and more affordable than other solutions.

What other advice do I have?

I would recommend Qualys because it is a reliable, affordable, and very safe product. It can have everything that you are looking for.

I would rate Qualys VM an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: partner
PeerSpot user
reviewer1342815 - PeerSpot reviewer
Consultant at a media company with 51-200 employees
Real User
Enables us to check the validity of legacy applications, infrastructure, and simple data operating systems
Pros and Cons
  • "The initial setup was good. We didn't have any problems with it."
  • "The ability to manage user accounts and give rights to the operator to know about abnormalities of applications is something that needs improvement."

What is our primary use case?

I use Qualys to review the validity of legacy applications, infrastructure, and simple data operating systems.

What needs improvement?

The ability to manage user accounts and give rights to the operator to know about abnormalities of applications is something that needs improvement. 

The pricing is also expensive.

For how long have I used the solution?

I have been using Qualys for four years. 

What do I think about the stability of the solution?

It's stable.

How are customer service and technical support?

I haven't needed to use technical support. 

How was the initial setup?

The initial setup was good. We didn't have any problems with it. 

What other advice do I have?

I would rate Qualys VM a ten out of ten. 

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Qualys VMDR
January 2025
Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.
832,138 professionals have used our research since 2012.
it_user254970 - PeerSpot reviewer
Technical Services Manager at a tech company with 10,001+ employees
Vendor
It is very simple and yet an effective way to do vulnerability assessment.

What is most valuable?

  • Vulnerability assessment
  • Asset management
  • WAS

How has it helped my organization?

Since this is a SaaS based solution, the vulnerability scan with the external scanners as well as the reporting has improved a lot. The reporting is very granular and you can please higher management with your reports.

What needs improvement?

None, as the product is great.

For how long have I used the solution?

I've used it for four years.

What do I think about the stability of the solution?

Stability of the product is very high, I have never seen it unavailable.

How are customer service and technical support?

Customer Service:

The support needs to improve a lot, their response is absolutely slow. I have had terrible experience with support over the years.

Technical Support:

I would rate it great because of its improvement since I have had terrible experiences in the past.

Which solution did I use previously and why did I switch?

We used McAfee Vulnerability Manager/Foundstone and had to switch because this is a SaaS based solution and has more features/capabilities.

How was the initial setup?

The initial setup is very simple in terms of configuring the appliance.

What about the implementation team?

We installed it ourselves,

What other advice do I have?

I would definitely recommmend using this product, as this is very simple and yet an effective way to do vulnerability assessment.

.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1399569 - PeerSpot reviewer
Senior Consultant at a tech services company with 11-50 employees
Consultant
Connects threat intelligence information with identified vulnerabilities, so you can prioritize vulnerabilities according to actual attacks
Pros and Cons
  • "The most valuable feature is the connection of threat intelligence information with identified vulnerabilities, which means you can prioritize vulnerabilities according to actual attacks."
  • "Some of the older features could be polished instead of focusing on releasing new features."

What is our primary use case?

I primarily use Qualys VM for vulnerability management, security configuration, and management and asset inventory.

What is most valuable?

The most valuable feature is the connection of threat intelligence information with identified vulnerabilities, which means you can prioritize vulnerabilities according to actual attacks.

What needs improvement?

Some of the older features could be polished instead of focusing on releasing new features.

For how long have I used the solution?

I've been using Qualys VM for around eighteen years.

What do I think about the stability of the solution?

We've had no problems with stability.

What do I think about the scalability of the solution?

Qualys VM is quite easy to scale, and you can cover a large number of instances.

How are customer service and support?

The technical support is pretty good, though sometimes the response time could be better.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup is quite simple.

What's my experience with pricing, setup cost, and licensing?

Qualys VM is better suited for medium to large companies because the price can be too much for smaller customers. With the SaaS version, you're buying a license for use per asset, so the price can differ, and there are additional fees for features like patch management and EDR policy compliance.

Which other solutions did I evaluate?

We also tested Tenable and Rapid7.

What other advice do I have?

I would rate Qualys VM as nine out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
it_user298425 - PeerSpot reviewer
Network and Lotus Notes Administrator at a insurance company with 1,001-5,000 employees
Vendor
It updates quickly and works without its presence being felt, but the problem-solving documentation needs improvement.

What is most valuable?

It gets up to date very fast.

How has it helped my organization?

Users do not feel any QualysGuard presence.

What needs improvement?

Solution for fixing problems need to be better documented, such as in a step by step way.

For how long have I used the solution?

I've used it for three years.

What was my experience with deployment of the solution?

No issues encountered.

What do I think about the stability of the solution?

No issues encountered.

What do I think about the scalability of the solution?

No issues encountered.

How are customer service and technical support?

Customer Service:

8/10.

Technical Support:

7/10.

Which solution did I use previously and why did I switch?

No previous solution was used.

What other advice do I have?

I strongly recommend that you use this solution.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1500162 - PeerSpot reviewer
Chief Information Officer/Senior Vice President at a tech services company with 51-200 employees
Real User
Helps prioritize which security patches need to be deployed on specific equipment
Pros and Cons
  • "The prioritization feature is great. I think it has all of the advanced features that we need."
  • "It's too early for me to say if there is any room for improvement since we're in the first couple of months of using this solution."

What is our primary use case?

It's used for vulnerability assessments, assessment of IT equipment, PCs, servers. It's supposed to help prioritize which security patches need to be deployed on that equipment.

What is most valuable?

The prioritization feature is great. I think it has all of the advanced features that we need.

What needs improvement?

It's too early for me to say if there is any room for improvement since we're in the first couple of months of using this solution. So far, we've been pretty happy about it. Nothing comes to mind that is negative.

Given that it's really new, we're really trying to use all of the features and get a good comfort level and gain more experience in it. For this reason, I can't speak negatively of it, yet.

For how long have I used the solution?

We've been using Qualys for roughly six to seven years, but we've only been using Qualys VMDR for a few months.

What do I think about the stability of the solution?

Qualys VMDR is very stable.

What do I think about the scalability of the solution?

Qualys VMDR is definitely scalable.

How are customer service and technical support?

They provide a lot of free virtual training to really understand the technology and the solution. That's a plus for them.

Which solution did I use previously and why did I switch?

I used to work with QualysGuard VM — an older version. The earlier version didn't have the detection response that we needed, that's why this time it has the detection response. VMDR is the evolution of the solution.

How was the initial setup?

The initial setup was pretty straightforward. Deployment was quick.

What about the implementation team?

We implemented this solution ourselves.

What other advice do I have?

Overall, on a scale from one to ten, I would give this solution a rating of eight. For us, it's just more of gathering more experience. The more we learn, I think we'll appreciate it, and then maybe from that point, we'll be able to say it's a nine, or a ten. It's more on us versus the solution.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
it_user251121 - PeerSpot reviewer
Senior IT Security Analyst at a tech services company with 501-1,000 employees
Consultant
The IT infrastructure needs work but WAF has improved our vulnerability identification.

What is most valuable?

WAF integration is valuable.

How has it helped my organization?

We can now perform vulnerability scans with WAF integration. The WAF has improved the vulnerability identification and reports to the SOC and CSO.

What needs improvement?

The IT infrastructure, especially server administration, needs to be improved.

For how long have I used the solution?

I've used it for two years.

What was my experience with deployment of the solution?

There was only one related, and that need work on our technology. As the solution is cloud based, we needed to adapt our internal policies.

What do I think about the stability of the solution?

There were no issues.

What do I think about the scalability of the solution?

This been done without a problem.

How are customer service and technical support?

Customer Service:

It's good.

Technical Support:

It's good.

Which solution did I use previously and why did I switch?

There was no previous solution, but I did execute several POCs.

How was the initial setup?

It was a regular setup for the configuration, but the official training was necessary.

What's my experience with pricing, setup cost, and licensing?

We also looked at Nessus and GFI Languard.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1405830 - PeerSpot reviewer
Technical Architect at a outsourcing company with 1,001-5,000 employees
Real User
Great vulnerability management but doesn't pick up every vulnerability
Pros and Cons
  • "Qualys VM's best feature is vulnerability management."
  • "Qualys VM's scanner doesn't pick up every vulnerability, so we have to use multiple scanners to cover that gap."

What is most valuable?

Qualys VM's best feature is vulnerability management.

What needs improvement?

Qualys VM's scanner doesn't pick up every vulnerability, so we have to use multiple scanners to cover that gap. Their reporting could also be more user-friendly. In the next release, I would like Qualys to include basic policy and compliance checks in the basic licensing. 

For how long have I used the solution?

I've been using Qualys VM for almost two years.

What do I think about the stability of the solution?

Qualys VM is quite stable - we've had no problems with it.

What do I think about the scalability of the solution?

Qualys VM's scalability depends on the license that you use.

Which solution did I use previously and why did I switch?

Previously we used Nessus, but only Qualys does intrusive scanning.

What about the implementation team?

We used an in-house team.

What's my experience with pricing, setup cost, and licensing?

An annual license for a single scanner costs around $3,000.

What other advice do I have?

Qualys VM is a really good tool for vulnerability scanning, and it has different sets of profiles that can be utilized for your own requirements. I would rate Qualys VM as seven out of ten.

Which deployment model are you using for this solution?

Private Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Download our free Qualys VMDR Report and get advice and tips from experienced pros sharing their opinions.
Updated: January 2025
Buyer's Guide
Download our free Qualys VMDR Report and get advice and tips from experienced pros sharing their opinions.