Try our new research platform with insights from 80,000+ expert users

Device42 vs Qualys VMDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Device42
Ranking in IT Asset Management
8th
Ranking in Configuration Management Databases
4th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
25
Ranking in other categories
IP Address Management (IPAM) Tools (5th), Data Center Infrastructure Management (4th)
Qualys VMDR
Ranking in IT Asset Management
4th
Ranking in Configuration Management Databases
2nd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
95
Ranking in other categories
Vulnerability Management (2nd), Container Security (9th), Risk-Based Vulnerability Management (1st)
 

Mindshare comparison

As of October 2025, in the IT Asset Management category, the mindshare of Device42 is 5.5%, down from 5.9% compared to the previous year. The mindshare of Qualys VMDR is 2.9%, down from 3.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Asset Management Market Share Distribution
ProductMarket Share (%)
Qualys VMDR2.9%
Device425.5%
Other91.6%
IT Asset Management
 

Featured Reviews

AHMEDKASSAB - PeerSpot reviewer
Allows us to determine the exact placement of assets based on the building maps and the room details
In my experience, I believe that the key concern is the pricing strategy of the solution. Instead, other solutions are much more cost-effective. Previously, Device42 has altered the pricing model to include a subscription fee which I see as very costly. They should change their pricing strategy and license scheme, conduct market research and ensure that they provide the right product in the market at the right price.
Ankesh Raj - PeerSpot reviewer
Real-time responses and reporting streamline vulnerability management
Qualys VMDR provides a real-time response and reporting feature, which is excellent. It allows us to see real-time graphs and reports for every asset, server, and more, which is very user-friendly. Our clients have given good feedback, and they are satisfied with the tool. We use it daily to fix vulnerabilities by connecting with infrastructure to remediate. The feedback from the client side is very good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable part is the ease of use. There's no training involved. It's pretty simple and straightforward."
"The continuous asset discovery is good because it means not having to manually input all the small data, such as IP addresses, leases, etc. It helps and saves us a lot of time."
"The topology layout is the most valuable feature."
"They've also just created some new interactive dashboards. CEOs can see and interact with the data rather than scrolling through endless Excel worksheets to find what they need."
"The solution's agentless approach to asset discovery is very important for us because installing agents on physical or virtual devices is not easy in our company. We have to escalate these kinds of things to different levels of security. Not having to install agents makes it easy for us."
"The IP address tracking [is valuable]... We have a lot of different devices and some of them have many IP addresses, so keeping track of which ones are assigned where is very critical for putting new devices on the network and giving them new addresses. All of our devices are statically assigned, so if we don't keep good records then we could accidentally assign a duplicate, which would cause problems on the network."
"The import/export for bulk operations is a valuable and good feature."
"I like the tool's agentless discovery feature. The tool configures the devices based on the documentation provided. I am also impressed with its auto-discovery feature. The tool also keeps on tracking and finds whatever is in the environment."
"The vulnerability management feature is what I used the most. It is a good SaaS product. It is easy to use. It has a nice UI where you can see all the assets and vulnerabilities."
"The most valuable feature is the certificate management."
"There are many features. Its reliability, ease of installation, ease of use, and the richness of the information provided are the most valuable features."
"Continuous monitoring is a crucial feature that we use more frequently."
"The most valuable feature is that this solution is very lightweight."
"The most valuable feature of Qualys Container Security is the detailed information in the reports and the remediation. This is done to make sure there are no vulnerabilities."
"The biggest benefit is from a security operations perspective, where we are able to drive our security posture upwards by remediating any discovered vulnerabilities."
"Using this product, we now have a vulnerability management cycle wherein VMDR plays a major role."
 

Cons

"The dependency mapping can be quite slow sometimes, if you've got a lot of things connecting to services. It can be very slow to build up the map."
"The resources table needs a few tweaks. We've raised a feature request for this. When you click on resources, it opens up the entire CMDB or the entire data stored in Device42. If that could be customizable, it would be good. We should be allowed to add our own columns to that by writing a script or something like that. There should be an option to add or limit whatever we want."
"My biggest problem with the product is the upgrades. First, we have to do them manually and second, not this last time but the time before that, we actually had to build a new VM to deploy the solution again. We had to back it up and then restore it to the new version. That was inconvenient."
"Since I was focused on deploying connectors and getting all the servers to be scanned, one of the biggest pains was when a job would fail, then the output (logging) was poor. For example, "Why did it fail?" In these cases, you get a generic error. It doesn't point you in the right direction and tell you why you got the error, which is really annoying. There have been times I asked, "Is there somewhere I can see a better log as to why is this failing?" That would be a really nice improvement."
"The architecture is a bit old-fashioned. Device42 is on one server, appliance, virtual machine, or guest. We are loading more into Device42 than it can hold. Overloading Device42 with REST API calls or tasks will directly impact every aspect because the server will be too busy to answer requests."
"The breadth and depth of the solution's discovery of IT asset information means the system does most of the work, but they need to work on improving the database discovery part, especially for Oracle Exadata."
"Device42 is a main part of our processes. We need reliability, not only in terms of the data but with the solution itself. It's really difficult when we have 10 minutes of Device42 downtime because none of our teams can work for those 10 minutes, and it's more time lost if there is longer downtime. An improvement would be to have a cluster implementation of Device42 to have high-availability and ensure that we don't have downtime in case of failure."
"It was hard to know which assets I'd already looked at because if I looked up another asset with a similar name, they would still pop up. I would have to make sure I was looking at the right asset. The search function should be improved."
"The tool needs to improve the adding assets and report generation features. I would like to see the policy scan of offline appliances in the product's future releases."
"Qualys doesn't have its own tool to deploy the agents all at once, so we need to use third-party tools such as BigFix or something else to deploy the agents, which is my main concern and should be fixed by the Qualys team."
"In terms of improvement for the web application console, in the older version, things were more segregated and presented in a brief format."
"Its integration with ServiceNow and other similar products is complicated and can be improved. It should also have virtual batching. They should support more standards and compliance requirements and more customizations. For policy compliance, they can add the standards required by the countries in the Middle East. Each country generates its own standards and frameworks, and those frameworks should be there in all products, not only in Qualys. The market here is huge, especially in the cybersecurity field. Qatar has a framework for Qatar 2022, and each and every company in the public or private sector has to follow the Qatar 2022 framework."
"I would like to have CSPM, a continuous scan-like cloud added to the solution."
"Sometimes the scanning can get overwhelmed and start to drag when a lot of users are trying to scan at once."
"Qualys should improve their customer experience. They need to improve the tech support experience and the turnaround time."
"The disadvantage of working with Qualys is that the graphical interface is quite outdated."
 

Pricing and Cost Advice

"It's in the top-three most expensive solutions in terms of cost, but it has all the features that are needed."
"The product cost is low. It is quite cheap."
"Our licensing costs are on a yearly basis."
"The problem with using other vendor, like BMC, is the pricing. The price is so horrible and nobody wants to pay this money."
"On a yearly basis, our licensing is $10,000. However, our license is now nearly full with devices. We need the next bigger license with 5,000 devices, which will cost us $19,000. We pay for a set of licenses, a maximum number of devices, and a maximum number of IP addresses. We have the smallest amount of features, which is enough for us at this time."
"Functionality-wise, Device42 is on par with industry standards, but price-wise, the solution is expensive. I'm rating the pricing for the solution as eight out of ten."
"We pay $100,000 per year."
"I am not involved in its pricing, but I have seen their plans during a discussion with the customer. For 500 servers, they were asking 50,000 USD. The cost of BMC Discovery was less than half. For the same thing, they were charging only 10,000 USD. Its pricing needs to be improved. As compared to other discovery tools, such as BMC Discovery and ServiceNow Discovery, its price is a little bit higher."
"The solution is expensive."
"The pricing and licensing for Qualys could be improved."
"Usually every implementation is different and the quote is in function of number of assets."
"When you want to cover yourself for scalability, you will be charged for the number you place on the scan itself."
"There are no additional fees in addition to the standard licensing fees."
"The product is more expensive than that of any other vendor."
"It is different for every company, but for us, it's every three years."
"The solution is reasonably priced for the value it provides."
report
Use our free recommendation engine to learn which IT Asset Management solutions are best for your needs.
868,787 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
10%
Healthcare Company
8%
Financial Services Firm
17%
Computer Software Company
11%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise13
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise12
Large Enterprise69
 

Questions from the Community

What needs improvement with Device42?
The product must provide AI features. It would be very useful if I could create datasets or queries from an AI interface.
What is your primary use case for Device42?
I use the solution for physical assets management, IT management, and application dependency mapping.
What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...
What is your experience regarding pricing and costs for Qualys VMDR?
My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.
What needs improvement with Qualys VMDR?
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually. Qualys doesn't have its own tool to deploy the agents all...
 

Comparisons

 

Also Known As

No data available
Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security
 

Overview

 

Sample Customers

Computershare, Concur, Doosan, Fitch Ratings Inc., Fujitsu, HomeAway, Jasper Wireless, Mercedes-Benz, Square, Twitch, UCSB, Zayo Group Inc.
Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
Find out what your peers are saying about Device42 vs. Qualys VMDR and other solutions. Updated: September 2025.
868,787 professionals have used our research since 2012.