No more typing reviews! Try our Samantha, our new voice AI agent.

CyCognito vs Qualys CyberSecurity Asset Management comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CyCognito
Ranking in Attack Surface Management (ASM)
13th
Average Rating
7.0
Reviews Sentiment
3.3
Number of Reviews
1
Ranking in other categories
Breach and Attack Simulation (BAS) (9th)
Qualys CyberSecurity Asset ...
Ranking in Attack Surface Management (ASM)
2nd
Average Rating
9.0
Reviews Sentiment
7.0
Number of Reviews
35
Ranking in other categories
Vulnerability Management (8th), Patch Management (5th), Cyber Asset Attack Surface Management (CAASM) (1st), Software Supply Chain Security (3rd)
 

Mindshare comparison

As of October 2026, in the Attack Surface Management (ASM) category, the mindshare of CyCognito is 2.2%, down from 4.3% compared to the previous year. The mindshare of Qualys CyberSecurity Asset Management is 3.5%, down from 4.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Attack Surface Management (ASM) Mindshare Distribution
ProductMindshare (%)
Qualys CyberSecurity Asset Management3.5%
CyCognito2.2%
Other94.3%
Attack Surface Management (ASM)
 

Featured Reviews

VO
IT Specialist at Squemart
Automated attack surface mapping has improved risk visibility but still needs better guidance
I believe CyCognito could improve by lowering the false positive rate. When false positives occur with CyCognito, we experience frustrating delays in customer support. Standard support tickets for complaints often take too long to resolve. Additionally, the remediation workflow guidance is sometimes criticized for lacking clear step-by-step instructions on fixing vulnerabilities, requiring manual engineering research. Adding specific code fixes or configuration lines could prevent teams from manually figuring out corrections. Moreover, the tool is somewhat expensive, particularly for small to medium businesses such as ours, pushing smaller IT teams to utilize lower-cost or open-source alternatives. Ideally, a pricing tier favorable to these smaller organizations would be beneficial. I also suggest a consumption-based model based on testing frequency rather than total asset count to enhance platform accessibility. CyCognito also lacks native compliance questionnaire management and vendor scorecard tracking, which could improve overall utility. Finally, while it maps third-party parameters, it cannot fully address lateral movement paths as some other scanners can, requiring reliance on external API integration.
Jay Buoy - PeerSpot reviewer
IT Security Manager at a manufacturing company with 10,001+ employees
Has improved visibility of asset risks and helped prioritize remediation across the environment
The quality at times of the technical support or customer support for Qualys CyberSecurity Asset Management is not as fast as what you would it to be. If you have an issue out there, I don't really know if it's so much related to the support or if you're going through your account manager also for the remediation. But that can be a little slow at times.There have been a couple of times where Qualys CyberSecurity Asset Management wasn't accessible and I'd reach out to our TAM and they'd say, 'Qualys is down.' They say, 'We'll let you know when it's back up.' Of course, they never let you know when it's back up. You just keep trying later on and then eventually it comes back up. It's probably gone down maybe about five or six times since I've had it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Since using CyCognito, we have observed specific outcomes, for the last operational year, we had about 30 to 50 percent more risk surface with hidden internet-exposed assets that traditional internal scanning tools missed, MTTR was reduced by more than 60 percent, compressing timelines to patch critical vulnerabilities from weeks or months down to days, the prioritization engine filtered out noise, forcing the security team to focus on a small fraction of exploitable risks, we also saw a less than 5 percent false positive rate, which eliminated hours of manual validation work, and we have saved significantly annually due to automated external testing, reducing reliance on manual penetration testing and expensive external bug bounty programs."
"The asset management part is very simple and essential, and Qualys CyberSecurity Asset Management was particularly effective because the information was available exactly where needed, enabling automation and quick access to necessary answers."
"I would rate the Qualys CSAM a ten out of ten for its overall performance."
"It de-duplicates findings and helps you understand what the vulnerabilities from your external scans and your external attack surface management are and how they connect to the vulnerabilities on your internal scans."
"The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments."
"The integration with different third-party tools, such as cloud providers like Azure and AWS, and asset management tools like CMDB systems, is valuable."
"Qualys CyberSecurity Asset Management is definitely good for a big company; it really helps you keep an eye on your whole environment rather than little pieces here and there throughout your tech stack."
"When you implement a dynamic tag using a query, you do not need to manually tag all the servers. It categorizes all the servers that come under that query. The tagging part is automatically done within a few minutes. It reduces the effort."
"The support is extremely helpful, deserving a 10 out of 10 rating."
 

Cons

"When false positives occur with CyCognito, we experience frustrating delays in customer support."
"In the best practice for categorizing assets with the C-SAM module in Qualys CyberSecurity Asset Management, I see potential for improvement with integration of other CMDB systems in creating a relationship with Qualys and other solutions."
"Some areas that would be helpful are more comprehensive tagging and the ability to set up better dynamic rules."
"Sometimes both updates and software types appear together on one list, making it hard to differentiate."
"The scanning function could be improved."
"Qualys could improve by enhancing its dynamic tagging and role-based access control features, and by refining its user interface for a more intuitive and efficient user experience."
"The activity log is terrible."
"The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance."
"They should address the false positives generated in EASM. It is fetching assets that have Infosys as the keyword. They should fix that."
 

Pricing and Cost Advice

Information not available
"Qualys offers excellent value for money."
"Though the solution is considered expensive, if bundled with other services such as VMDR or cloud agents, its value would significantly increase. It is currently a bit costly, but with bundling, it could become attractive to more customers."
"The pricing is fair. I would love to see the price come down a little bit, but we do get a lot of value out of it. We are squeezing every ounce of value we can out of the tool."
"The Qualys Cybersecurity Asset Management pricing is well-aligned with our usage."
"The cost for Qualys CyberSecurity Asset Management is high."
"The pricing for Qualys CSAM is nominal."
"Qualys is competitively priced for its features. Its pricing is suitable for large organizations with more than 4,000 assets, but for smaller organizations with few assets, such as banks, the costs might be high. They should come up with packages that are suitable for small organizations."
"The pricing for Qualys Cybersecurity Asset Management is reasonable, with an annual subscription costing around $1,000 per year or a monthly subscription starting at approximately $72 per month, depending on the specific package and features included."
report
Use our free recommendation engine to learn which Attack Surface Management (ASM) solutions are best for your needs.
919,894 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Comms Service Provider
10%
Manufacturing Company
9%
Retailer
7%
Financial Services Firm
14%
Comms Service Provider
9%
Outsourcing Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise23
 

Questions from the Community

What needs improvement with CyCognito?
I believe CyCognito could improve by lowering the false positive rate. When false positives occur with CyCognito, we experience frustrating delays in customer support. Standard support tickets for ...
What is your primary use case for CyCognito?
My main use case for CyCognito is attack surface management. It helps me bridge ethical considerations as it serves as a simulation of what an attacker would do in real life, allowing me to continu...
What advice do you have for others considering CyCognito?
CyCognito is deployed in our organization as a multi-tenant public cloud SaaS platform. It analyzes our infrastructure from an outside-in attacker perspective, so it is not deployed as a private cl...
What needs improvement with Qualys CyberSecurity Asset Management?
I think the one thing Qualys CyberSecurity Asset Management can do better is the package management and the updating process. Knowing that you can't update any of the packages until you've done the...
What is your primary use case for Qualys CyberSecurity Asset Management?
I primarily use it for a small, single-site, multi-source setup with multi-WAN inputs. I have a main fiber connection and a couple of failovers while managing different networks across different se...
 

Overview

 

Sample Customers

UTA, BERTELSMANN, WIPRO
Information Not Available
Find out what your peers are saying about TrendAI, Qualys, BitSight and others in Attack Surface Management (ASM). Updated: October 2026.
919,894 professionals have used our research since 2012.