Try our new research platform with insights from 80,000+ expert users

Cortex XSIAM vs Qualys CyberSecurity Asset Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.4
Cortex XSIAM offers significant ROI and reduced staffing needs, though some businesses await full financial assessments.
Sentiment score
8.2
Qualys CyberSecurity Asset Management enhances efficiency, cuts costs, reduces incidents, boosts growth, and saves labor costs through automation.
Improvements to our security infrastructure contributed to overall business growth of approximately 150 percent over the past year.
By automating tasks, it significantly reduces the human resources required, leading to increased efficiency and productivity.
It has reduced the number of development and scripting hours along with maintenance hours.
 

Customer Service

Sentiment score
6.9
Cortex XSIAM customer support varies, with mixed reviews ranging from inadequate responses to helpful, efficient resolutions across different tiers.
Sentiment score
7.9
Qualys CyberSecurity Asset Management support is highly rated for its expertise, promptness, and effective issue resolution, enhancing user satisfaction.
It is ineffective in terms of responding to basic queries and addressing future requirements.
The Palo Alto support team is fully responsive and helpful.
The support team was knowledgeable and offered a variety of quick resolution options.
Their SMEs have sufficient knowledge, and if they are not the right contact, they quickly redirect us to someone who can help resolve issues.
I would rate their customer support a ten out of ten.
 

Scalability Issues

Sentiment score
7.3
Cortex XSIAM scales easily for enterprises, rated highly for scalability, despite integration reliance concerns, supporting numerous assets and users.
Sentiment score
8.7
Qualys CyberSecurity Asset Management is praised for seamless scalability, efficiently managing global environments and integrating new features effortlessly.
Without proper integration, scaling up with more servers is meaningless.
Cortex XSIAM is highly scalable.
We have about 300,000 assets installed with agents worldwide.
Qualys Cybersecurity Asset Management has proven to be a highly scalable solution for us over the past couple of years.
Qualys CSAM is highly scalable.
 

Stability Issues

Sentiment score
8.2
Cortex XSIAM is highly stable, cloud-based, and dependable, with minimal downtime, excellent reliability ratings, and rare intervention needs.
Sentiment score
8.2
Qualys CyberSecurity Asset Management offers reliable performance, minor syncing delays post-updates, and consistently seamless reports and scans.
The product was easy to install and set up and worked right.
Overall, Cortex XSIAM is stable.
I would rate the stability of Qualys CSAM a ten out of ten.
They are constantly adding capabilities.
This platform demonstrates excellent stability with consistent 100 percent uptime and no glitches observed.
 

Room For Improvement

Cortex XSIAM needs improvements in integration, performance, usability, and support services, with enhanced automation and developer-friendliness.
Qualys CyberSecurity Asset Management should enhance integrations, reduce costs, and improve customization, UI, asset tagging, and learning resources.
Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long.
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports.
Cortex could improve the detection and online resolution of security vulnerabilities.
Qualys is currently not able to identify assets lacking DNS information.
Features enhancing the interaction with IT or security teams should be added, such as a ticketing feature that, if an issue arises in the CSAM module, enables direct ticket creation in systems like ServiceNow.
We would prefer more options, such as 'approved only for pilot' or 'approved for this line of business,' allowing for better granularity in categorizing software.
 

Setup Cost

Cortex XSIAM is competitively priced compared to Splunk and Microsoft Sentinel but involves complex licensing and additional costs.
Qualys CyberSecurity Asset Management offers excellent value for large enterprises with transparent, flexible pricing despite some cost concerns.
The first impression is that XSIAM would be more expensive than others we tried.
The product is very expensive.
Cortex XSIAM is pretty expensive, and the licensing process is not very comfortable.
A cost-effective solution.
A monthly subscription starting at approximately $72 per month, depending on the specific package and features included.
Though the solution is considered expensive, if bundled with other services such as VMDR or cloud agents, its value would significantly increase.
 

Valuable Features

Cortex XSIAM provides advanced threat detection with machine learning, seamless third-party integration, and comprehensive network and endpoint protection.
Qualys CyberSecurity Asset Management excels in real-time visibility, asset discovery, third-party integration, and efficient cybersecurity operations with dynamic tools.
One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities.
The flexibility for creating manual workflows stands out.
Its signature-less subscriptions and robust detection power stand out in improving threat detection.
By correlating this with QDS scores, we can accurately assess the risk level of high or low QDS scores associated with each asset and monitor them accordingly.
The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments.
It also performs scans to identify any vulnerabilities, which helps to take proactive measures before those vulnerabilities are identified by any attacker.
 

Categories and Ranking

Cortex XSIAM
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
12
Ranking in other categories
Security Information and Event Management (SIEM) (14th), Identity Threat Detection and Response (ITDR) (6th), AI-Powered Cybersecurity Platforms (7th)
Qualys CyberSecurity Asset ...
Average Rating
9.2
Reviews Sentiment
7.6
Number of Reviews
21
Ranking in other categories
Vulnerability Management (10th), Patch Management (6th), Cyber Asset Attack Surface Management (CAASM) (3rd), Attack Surface Management (ASM) (4th), Software Supply Chain Security (5th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Cortex XSIAM is designed for Security Information and Event Management (SIEM) and holds a mindshare of 2.9%, up 0.8% compared to last year.
Qualys CyberSecurity Asset Management, on the other hand, focuses on Cyber Asset Attack Surface Management (CAASM), holds 7.0% mindshare, up 2.4% since last year.
Security Information and Event Management (SIEM)
Cyber Asset Attack Surface Management (CAASM)
 

Featured Reviews

AKASH MAJUMDER - PeerSpot reviewer
Incident response times have significantly reduced with efficient device integration and log parsing capabilities
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, similar to a feature available in Cortex XDR. The AI analytics need fine-tuning because some use cases are not working from my side.
Scott Frederick - PeerSpot reviewer
Well-integrated with our vulnerability scanning utilities and efficient in asset tagging and identification
Our favorite features are the tagging and the ability to quickly find assets in the portal. Additionally, I do like the fact that Qualys CSAM is integrated with the rest of our vulnerability scanning utilities. We use the full suite from Qualys. The fact that it is integrated makes it very easy to understand. It shares tagging information with VMDR. That is very nice. Qualys CSAM has discovered assets not previously covered by our vulnerability management program. Primarily, if we have assets without vulnerabilities, they become less visible, but Qualys CSAM alerts us to them because they have IP addresses and are attached to our network. It could discover everything from printers to servers to endpoints. It could discover UPSs, network devices, and across all operating systems. It discovers our security badge readers and digital signage. We have to feed that the IP address ranges, but beyond that, it finds everything in our internal network. We were able to realize its benefits within the first quarter of installing it. We did have to take some time to learn it and understand how to operationally leverage what it was telling us, but it was very quick. In addition to vulnerabilities, Qualys CSAM helps identify other risk factors to a degree. For instance, we can see if servers or assets have incorrect naming standards. We have our network segmented into development model, test, and production, and we have server naming standards that identify which management they should be in. If a production server has the naming standard of a development model server, we can find that. That is one area we have used it for. We are not fully using TruRisk, but we are using the Qualys detection score that is central to our corporate risk prioritization approach. It has completely replaced our homegrown one.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
10%
Government
7%
Computer Software Company
19%
Financial Services Firm
14%
Government
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Cortex XSIAM?
It is an effective solution in terms of performance and functionalities.
What is your experience regarding pricing and costs for Cortex XSIAM?
The licensing cost of Cortex XSIAM is more or less the same as Splunk, making it quite expensive compared to other tools. There are additional expenses for more functionalities.
What needs improvement with Cortex XSIAM?
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, simila...
What is your experience regarding pricing and costs for Qualys CyberSecurity Asset Management?
The pricing is reasonable relative to the features provided, as it collects all module data and operates as a main, centralized inventory, making it a cost-effective solution.
What needs improvement with Qualys CyberSecurity Asset Management?
The deployment is somewhat complicated and could be made more user-friendly for most users. It is currently not user-friendly for all users. It is good but can be improved. It is a new product, and...
What is your primary use case for Qualys CyberSecurity Asset Management?
We use it to identify all our assets, including those on our premises, cloud, and remote environments. It continuously monitors our assets, collects details like installed software, configurations,...
 

Overview

Find out what your peers are saying about Cortex XSIAM vs. Qualys CyberSecurity Asset Management and other solutions. Updated: September 2024.
851,604 professionals have used our research since 2012.