

Armis and Qualys CyberSecurity Asset Management both compete in the asset management and cybersecurity sector. Armis seems to have the upper hand in simplified deployment due to its agentless design, whereas Qualys excels in asset discovery and risk identification.
Features: Armis is preferred for its asset tracking capabilities, integration with security solutions, and agentless design that offers comprehensive management. It significantly enhances device visibility and classification. Qualys CyberSecurity Asset Management excels in providing detailed asset discovery and risk identification, integrating seamlessly across existing tools, and offering comprehensive asset inventory and cloud provider integration.
Room for Improvement: Armis could improve by enhancing integration capabilities with tools like ServiceNow and improving vulnerability testing and geographical market presence. Stability and communication with non-IT assets during implementation are other areas for improvement. Qualys could benefit from improving its user interface, system integrations, and report customization. It needs more support materials, better tag management, and enhanced configuration features for new modules.
Ease of Deployment and Customer Service: Armis supports diverse deployment models, including private cloud and on-premises setups, generally receiving positive feedback for its responsive support team. However, challenges exist in integrating with ticketing systems. Qualys offers flexibility in deployment across public and hybrid clouds. Its customer support is noted for promptness, although some users experience delays and a need for better onboarding support.
Pricing and ROI: Armis pricing is considered average, with no distinct cost-saving benefits identified yet. While it automates asset management, quantifying tangible ROI remains challenging. Qualys is viewed as cost-effective, especially when bundled with other services, though it poses a higher initial cost barrier. Pricing is competitive, and users recognize its value, but high costs may affect adoption in smaller organizations.
There is a 98% reduction in vulnerability workloads, enabling focus only on high-risk issues.
I have seen a return on investment with Armis, as it definitely improved remediation with fewer employees.
By automating tasks, it significantly reduces the human resources required, leading to increased efficiency and productivity.
It has reduced the number of development and scripting hours along with maintenance hours.
Qualys CyberSecurity Asset Management saves about 20% of my time during pen testing, allowing us to complete tasks in 3.5 days instead of five.
I have not faced challenges with Armis support, as pre-sales engineers have been helpful.
I would rate it ten out of ten.
Their SMEs have sufficient knowledge, and if they are not the right contact, they quickly redirect us to someone who can help resolve issues.
I would rate their customer support a ten out of ten.
They are effective; if I raise a ticket, they directly contact me and solve my problems, whether related to deployment or unresolved vulnerabilities.
As a SaaS platform, it is highly scalable.
Customers typically enjoy the solution and do not face any issues both before deployment during the POC and after deployment once they release the PO and get the implementation done.
It is very scalable and easy to scale, as I also rated it eight on a scale of one to ten.
We have about 300,000 assets installed with agents worldwide.
The scalability is excellent as we manage more than one hundred thousand assets, including over one hundred thousand endpoints, approximately 2,600 servers, and more than 1,200 network devices.
Qualys Cybersecurity Asset Management has proven to be a highly scalable solution for us over the past couple of years.
I would rate the stability of Qualys CSAM a ten out of ten.
The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance.
Everything is smoothly managed by a different team, and our scheduled scans run without interruptions.
Armis cannot be used as a standalone solution and should be integrated with other solutions.
The needed improvements I see include implementing cloud features, as the market, particularly in Brazil, is moving to cloud environments to reduce costs and time spent on upgrades and server management.
It misses out on a lot of vulnerabilities.
Features enhancing the interaction with IT or security teams should be added, such as a ticketing feature that, if an issue arises in the CSAM module, enables direct ticket creation in systems like ServiceNow.
If there's one key aspect to focus on, it's discovery—the ability to identify assets that you are not aware of, even when you can see they are present.
I find that while information is available regarding which users have access to our servers, retrieving it often requires checking servers individually rather than obtaining a consolidated extraction when needed.
Armis pricing is average, neither cheaper nor more expensive than other solutions.
The price is not very high.
Armis is slightly on the expensive range based on what I have observed.
A cost-effective solution.
I believe that the stability and reliability of Qualys offer great value for the money.
Though the solution is considered expensive, if bundled with other services such as VMDR or cloud agents, its value would significantly increase.
Armis is very easy to implement due to its agentless design and offers a granular level of visibility for all assets in the network.
It assesses open vulnerabilities, provides traffic flow insights, integrates with ticketing workflows, and aggregates security solutions like Active Directory and EDR.
Armis provides full visibility on OT devices and in the medical industry for devices such as ECG machines, X-rays, and infusion pumps.
It also performs scans to identify any vulnerabilities, which helps to take proactive measures before those vulnerabilities are identified by any attacker.
The most valuable feature is the Management sensor, which helps identify gaps in policy agent availability, thereby improving agent utilization.
It also helps detect shadow IT groups and enforce policies and compliance, ensuring that assets adhere to regulatory and internal security policies.
| Product | Mindshare (%) |
|---|---|
| Armis | 10.9% |
| Qualys CyberSecurity Asset Management | 10.1% |
| Other | 79.0% |


| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 3 |
| Large Enterprise | 8 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 2 |
| Large Enterprise | 23 |
Armis is a comprehensive cybersecurity solution used for continuous monitoring and threat detection across IT and IoT devices. It excels in spotting vulnerabilities, managing device compliance, and tracking assets to enhance security protocols and network management. Key features include real-time threat detection, comprehensive visibility, and granular risk assessments. Armis boosts organizational productivity by streamlining workflows and enhancing operational accuracy.
Qualys CyberSecurity Asset Management provides key features including asset inventory management, end-of-life tracking, dynamic tagging, and integration with CMDB, offering extensive visibility and support for proactive threat response.
Qualys offers comprehensive visibility across hardware and software assets, aiding in tracking unauthorized applications and facilitating automated vulnerability remediation. Its user-friendly interface and dynamic risk scoring enhance security posture management. Users leverage it for vulnerability management and compliance, benefiting from real-time risk identification and efficient operations in cloud and on-premises environments.
What are the key features of Qualys CyberSecurity Asset Management?Cybersecurity teams in various industries, such as financial services, healthcare, and manufacturing, utilize Qualys to manage technical debt through end-of-life tracking and facilitate robust patch management. It supports compliance and visibility initiatives, essential for maintaining data integrity and operational security in dynamic environments.
We monitor all Cyber Asset Attack Surface Management (CAASM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.