

Qualys VMDR and Device42 are competing solutions in the cybersecurity and asset management categories, respectively. In this comparison, Qualys VMDR appears to have the upper hand in terms of flexibility and ROI, while Device42 leads with lower cost and asset discovery capabilities.
Features: Qualys VMDR offers automated scanning, cloud capabilities, and continuous monitoring, enhancing vulnerability management across diverse environments. Device42 excels in IT asset management, providing efficient agentless discovery and dependency mapping for comprehensive asset visibility.
Room for Improvement: Qualys VMDR needs enhancements in reporting, interface simplification, and reducing false positives. Device42 could improve in discovery depth, dashboard customization, and pricing strategies, with a focus on agentless function enhancements.
Ease of Deployment and Customer Service: Qualys VMDR offers flexible deployment options across cloud environments but has inconsistent customer support responsiveness. Device42 provides solid customer service but follows more traditional on-premises deployment methods.
Pricing and ROI: Qualys VMDR is generally more expensive but provides strong ROI through risk reduction and security improvements, especially for large enterprises. Device42 is more cost-effective, offering solid asset management solutions with some additional costs for application discovery.
The TCO calculations based on five years and three years have yielded a remarkable ROI compared to on-premise workload, validating the business case submission to the customer.
I can confidently say at least 30% is the savings which we have seen.
Device42 is a fully-featured tool that includes everything we need with powerful auto-discovery and intelligent application dependency mapping.
We saw a return on investment through significant savings in time, money, and resources.
Customer support for Device42 is fantastic.
Our internal teams have also leveraged the platform which is available for the customers and the partners to onboard them, have a bit of training on the tool and then ask any specific questions to either the TAM or the customer support team.
When it comes to resolving technical issues, the support team is responsive and always available to help.
We usually get on calls with tech support, and they are very helpful.
The response time takes a while.
The technical support provided by Qualys is pretty good.
It is very much scalable and allows you to design your discovery solution without facing any challenge.
Device42's scalability works well for me; if I want to add more resources, such as a Remote Collector for a new site, I can easily connect it to the main appliance.
The scalability is good and with the increase in the size of the environment, it has definitely grown and changed over the last couple of years.
Scalability depends on the license and the number of assets being monitored.
Qualys VMDR can handle scalability, although increasing the inventory can raise the licensing costs.
Qualys VMDR's scalability is good, and the customer support is good.
Device42 is stable and has been reliable for my organization.
Device42 has been pretty stable.
Stability for Device42, in terms of reliability, is generally acceptable.
Qualys VMDR is stable.
Device42 could benefit from improvements, specifically regarding the deployment of the software, which sometimes can be hectic and become time-consuming.
I foresee areas of improvement for the agent-less solution, which could be very useful for those organizations that might not allow configuring an agent in their source machines for workload discovery.
From an ITSM and ticketing perspective, I would say if there were integrations available, that would have really been better because a lot of times what we end up seeing or leveraging is ServiceNow because they have that native or out of the box capability, and even Freshservice has that capability out of the box.
It does not automate patching unless the patch management module is purchased separately.
If AI features were integrated, it could enhance the capabilities significantly.
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually.
Compared to other competitors, it does not cost much, and I would recommend it from a cost perspective.
For example, I felt the BMC Discovery pricing was quite high.
The pricing, setup cost, and licensing for Device42 are relatively cost-effective and affordable.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
Qualys offers better pricing and is feature-packed compared to other tools.
Device42 has positively impacted my organization by providing granularity toward application discovery compared to other assessment tools, which is a differentiator since none of the other tools provide such granularity, leading to better decision-making for my migration to the public cloud.
We have leveraged that to discover IT assets such as physical servers, VMs, network devices, containers, storage devices, the applications, cloud resources and their relationships or their dependencies with each other and to the outside.
Device42 has positively impacted our organization by helping us become one of the best companies for asset management and inventory for the enterprise businesses we work with.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
| Product | Mindshare (%) |
|---|---|
| Qualys VMDR | 2.6% |
| Device42 | 4.1% |
| Other | 93.3% |


| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 6 |
| Large Enterprise | 20 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 12 |
| Large Enterprise | 70 |
Device42 empowers enterprises with automatic IT asset discovery, application dependency mapping, and agentless discovery, streamlining asset management, improving decision-making, and supporting migration initiatives.
Device42 automates network discovery and provides comprehensive IT data management, making it indispensable for asset and infrastructure management. The platform’s integration capabilities, such as with ServiceNow, allow seamless management of physical and virtual environments. Its application dependency mapping is a critical feature for efficient cloud migration, while advanced search and dashboards enhance operational tasks. Device42's ease of deployment coupled with integration into cloud services offers robust operational insights and simplifies onboarding.
What are Device42's key features?Device42 is widely used across sectors for IT asset and infrastructure management, where automation in inventory and documentation aids compliance and resource optimization. It excels in industries requiring integration with existing systems and comprehensive network solutions. Application dependency mapping bolsters cloud migration efficiency in enterprise environments.
Qualys VMDR is a comprehensive cybersecurity tool offering vulnerability management, patch management, and continuous monitoring with real-time asset discovery. It delivers scalable, cloud-based solutions that enhance security operations without additional infrastructure.
Qualys VMDR provides a robust platform for enterprise security, integrating vulnerability management, compliance, and asset inventory for full visibility across cloud and on-premises environments. It features a comprehensive dashboard with threat intelligence-driven prioritization and remediation capabilities. Users benefit from accurate assessments via agent-based scanning and appreciate the intuitive, customizable scanning and reporting interface. However, there's room for improvement in false positive reduction, UI simplification, and integration capabilities, along with enhancements in asset management for large-scale deployments and the vulnerability database. Enhancing technical support speed, patch management, compliance standards, and inter-module navigation would further enrich user experience.
What are the key features of Qualys VMDR?Qualys VMDR is widely used in industries needing stringent security and compliance measures, offering comprehensive vulnerability and compliance management. It is deployed to secure web applications, servers, and crucial assets, supporting a wide range of sectors by ensuring policy adherence and vulnerability tracking through its powerful cloud platform.
We monitor all IT Asset Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.