

Qualys VMDR and Device42 are competing solutions in the cybersecurity and asset management categories, respectively. In this comparison, Qualys VMDR appears to have the upper hand in terms of flexibility and ROI, while Device42 leads with lower cost and asset discovery capabilities.
Features: Qualys VMDR offers automated scanning, cloud capabilities, and continuous monitoring, enhancing vulnerability management across diverse environments. Device42 excels in IT asset management, providing efficient agentless discovery and dependency mapping for comprehensive asset visibility.
Room for Improvement: Qualys VMDR needs enhancements in reporting, interface simplification, and reducing false positives. Device42 could improve in discovery depth, dashboard customization, and pricing strategies, with a focus on agentless function enhancements.
Ease of Deployment and Customer Service: Qualys VMDR offers flexible deployment options across cloud environments but has inconsistent customer support responsiveness. Device42 provides solid customer service but follows more traditional on-premises deployment methods.
Pricing and ROI: Qualys VMDR is generally more expensive but provides strong ROI through risk reduction and security improvements, especially for large enterprises. Device42 is more cost-effective, offering solid asset management solutions with some additional costs for application discovery.
The TCO calculations based on five years and three years have yielded a remarkable ROI compared to on-premise workload, validating the business case submission to the customer.
I can confidently say at least 30% is the savings which we have seen.
We saw a return on investment through significant savings in time, money, and resources.
Customer support for Device42 is fantastic.
Our internal teams have also leveraged the platform which is available for the customers and the partners to onboard them, have a bit of training on the tool and then ask any specific questions to either the TAM or the customer support team.
When it comes to resolving technical issues, the support team is responsive and always available to help.
We usually get on calls with tech support, and they are very helpful.
The response time takes a while.
The technical support provided by Qualys is pretty good.
It is very much scalable and allows you to design your discovery solution without facing any challenge.
The scalability is good and with the increase in the size of the environment, it has definitely grown and changed over the last couple of years.
Scalability depends on the license and the number of assets being monitored.
Qualys VMDR can handle scalability, although increasing the inventory can raise the licensing costs.
Qualys VMDR's scalability is good, and the customer support is good.
Device42 is stable and has been reliable for my organization.
Device42 has been pretty stable.
Qualys VMDR is stable.
I foresee areas of improvement for the agent-less solution, which could be very useful for those organizations that might not allow configuring an agent in their source machines for workload discovery.
From an ITSM and ticketing perspective, I would say if there were integrations available, that would have really been better because a lot of times what we end up seeing or leveraging is ServiceNow because they have that native or out of the box capability, and even Freshservice has that capability out of the box.
If automatic updates were available for the solution instead of having customers go through the process of downloading and uploading update packages themselves, it would be beneficial.
It does not automate patching unless the patch management module is purchased separately.
If AI features were integrated, it could enhance the capabilities significantly.
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually.
Compared to other competitors, it does not cost much, and I would recommend it from a cost perspective.
For example, I felt the BMC Discovery pricing was quite high.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
Qualys offers better pricing and is feature-packed compared to other tools.
Device42 has positively impacted my organization by providing granularity toward application discovery compared to other assessment tools, which is a differentiator since none of the other tools provide such granularity, leading to better decision-making for my migration to the public cloud.
We have leveraged that to discover IT assets such as physical servers, VMs, network devices, containers, storage devices, the applications, cloud resources and their relationships or their dependencies with each other and to the outside.
Device42 has positively impacted our organization by helping us become one of the best companies for asset management and inventory for the enterprise businesses we work with.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
| Product | Market Share (%) |
|---|---|
| Qualys VMDR | 2.5% |
| Device42 | 4.2% |
| Other | 93.3% |


| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 5 |
| Large Enterprise | 17 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 12 |
| Large Enterprise | 70 |
Device42 is a powerful asset management tool for inventory, asset discovery, and CMDB purposes. It can be deployed on-premises or on the cloud and is praised for its ease of use, coordination, and reasonable pricing.
The tool's most valuable features include agentless discovery, service discovery, business application mapping, import/export for bulk operations, reporting, insights+, REST API abilities, auto-discovery, topology layout, and data center infrastructure management. Device42 has helped organizations provide visibility into on-premises infrastructure, aiding in asset management, automating IT problem-solving, and aiding in decision-making about resources.
Say goodbye to spreadsheets and manual drawings which are, at best, inefficient and quickly outdated. Device42 auto-generates accurate infrastructure and inter-dependency diagrams making data center management faster, easier, and more accurate.
Access real-time configuration data to understand where resources are and how those resources are being consumed. Support future capacity and growth planning.
Increase data center staff productivity. By minimizing or eliminating redundant and low-value data entry, IT staff can spend more time on high-value business initiatives.
Device42 integrates with many popular 3rd-party tools and imports from almost anywhere!
Make the most out of your budget. Track software and support entitlements, and full hardware asset lifecycles.
Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.
Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.
With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.
We monitor all IT Asset Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.