No more typing reviews! Try our Samantha, our new voice AI agent.

ImmuniWeb vs Qualys CyberSecurity Asset Management comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ImmuniWeb
Ranking in Attack Surface Management (ASM)
29th
Average Rating
8.2
Reviews Sentiment
7.8
Number of Reviews
7
Ranking in other categories
Static Application Security Testing (SAST) (32nd)
Qualys CyberSecurity Asset ...
Ranking in Attack Surface Management (ASM)
3rd
Average Rating
9.0
Reviews Sentiment
7.0
Number of Reviews
35
Ranking in other categories
Vulnerability Management (6th), Patch Management (5th), Cyber Asset Attack Surface Management (CAASM) (3rd), Software Supply Chain Security (2nd)
 

Mindshare comparison

As of June 2026, in the Attack Surface Management (ASM) category, the mindshare of ImmuniWeb is 1.4%, up from 0.5% compared to the previous year. The mindshare of Qualys CyberSecurity Asset Management is 3.5%, up from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Attack Surface Management (ASM) Mindshare Distribution
ProductMindshare (%)
Qualys CyberSecurity Asset Management3.5%
ImmuniWeb1.4%
Other95.1%
Attack Surface Management (ASM)
 

Featured Reviews

Vivek Ashvinbhai Pancholi - PeerSpot reviewer
Senior Cybersecurity Consultant at a tech consulting company with 1,001-5,000 employees
Commendable Solution with Robust Vulnerability Detection Mechanism Suitable for Global Market
The solution helped us with one of our clients in the New York area contacted us about a data breach. In response, we swiftly organized a case meeting involving our client, internal, and email customer support teams. Together, we conducted an incident response, facilitating offline assistance for proper planning and risk management processes. We delved into the details of the data breach, identified how it occurred, and collaborated to rectify the issue. The client expressed satisfaction with the resolution process.
Nicki Møller - PeerSpot reviewer
Information Security Engineer at a manufacturing company with 5,001-10,000 employees
Enables automation and quick access to necessary information
One of the significant challenges Qualys is discovery, which I know Microsoft excels at. I can't recall how well Qualys performs this function; it seems I might be missing some details. However, if there's one key aspect to focus on, it's discovery—the ability to identify assets that you are not aware of, even when you can see they are present. Understanding what those assets are is crucial. With Qualys CyberSecurity Asset Management, it was very difficult to extract detections from the system. The features within Qualys are limited to what they have developed. Sometimes a complete overview is needed to push to a Power BI dashboard, Splunk, ServiceNow, or other platforms. The export process is incredibly challenging. We needed a developer to write a hundred-line Python script that would loop over certain assets due to export limitations. Qualys CyberSecurity Asset Management could improve its integration capabilities. While it generates substantial data, correlating it with other data sources can be challenging. The export process is difficult, and pre-built integrations with other tools could be enhanced for better process implementation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ImmuniWeb Platform is the best and easiest way to secure a business online."
"The initial setup process is user-friendly."
"I have managed to deliver to my clients the services of Ethical Hacking in less time, with better deliverables, and other key differentiators that make my company more competitive in the local market."
"ImmuniWeb boasts a robust vulnerability detection mechanism, formidable threat mitigation, and an efficient remediation process, incorporating automation techniques and ALM strategies. The solution is highly stable. The solution is scalable. Editing Key Points for Review "Review about ImmuniWeb" What is our primary use case? We use the solution when we face challenges and urgent attention is needed for complex cases from our clients. To address this, we collaborate with the middleware, internal, and client teams to analyze and sort through intricate logs concerning our business cybersecurity program. How has it helped my organization? The solution helped us with one of our clients in the New York area contacted us about a data breach. In response, we swiftly organized a case meeting involving our client, internal, and email customer support teams. Together, we conducted an incident response, facilitating offline assistance for proper planning and risk management processes. We delved into the details of the data breach, identified how it occurred, and collaborated to rectify the issue. The client expressed satisfaction with the resolution process. What is most valuable? ImmuniWeb boasts a robust vulnerability detection mechanism, formidable threat mitigation, and an efficient remediation process, incorporating automation techniques and ALM strategies. It also focuses on consumer satisfaction and operates in English-speaking markets, primarily required by the UAE, the United States, Canada, and Australia, among other developed countries. For how long have I used the solution? We have been using this product for the past one and half years. What do I think about the stability of the solution? The solution is highly stable. I rate it a perfect ten. What do I think about the scalability of the solution? The solution is scalable. I rate it a nine out of ten. How are customer service and support? Support is generally excellent"
"After the assessment, you clearly know which assets require penetration testing."
"The most valuable features are the SLA of Zero false-positives, less time of service development, validation of unlimited patched vulnerabilities, and several others."
"I like the fully automated continuous discovery run by ImmuniWeb in the background. We do not need to rerun the same tests or the same scanning against our resources. We need to supply our IP addresses, domain names, and significant resources with special domain names and URLs, and we need to do it only once. Then we always have an up-to-date picture. I also like the integration with our single sign-on system. We do not need to maintain a separate set of usernames or user accounts. We can plug this ImmuniWeb service into our authentication technology, enabling two-factor authentication. We have secure authentication right out of the box. The other important feature I like is the executive view. You can easily switch from a technical view to an executive view and have a helicopter view of the compliance status. We can see how much effort is required and our current status."
"ImmuniWeb is stable."
"Authorized and unauthorized software visibility is the best feature for me. It helps me understand security controls on our network and where we lack visibility. With a single security tool, we are able to get an extensive list."
"Qualys CyberSecurity Asset Management offers valuable features such as continuous vendor support, rapid response times, dedicated vendor partnerships, and advanced technical capabilities for risk identification."
"The fact that it is integrated makes it very easy to understand."
"Qualys CyberSecurity Asset Management offers comprehensive features to cover our entire attack surface."
"The dashboards are my favorite feature; I can pull up information and create my own dashboards specifically for what I'm looking for."
"Regarding return on investment, I first look at the reality of the environment and the decrease in critical vulnerabilities with Qualys CyberSecurity Asset Management, which equals a positive return on investment."
"I like the EASM part because it provides visibility into unmanaged assets that are public-facing."
"Qualys CyberSecurity Asset Management is definitely good for a big company; it really helps you keep an eye on your whole environment rather than little pieces here and there throughout your tech stack."
 

Cons

"A great idea would be to support using Discovery on the internal network, allowing delivery of all the features of the current Discovery to internal network resources."
"ImmuniWeb sometimes shows previous scans instead of running tests."
"You may find the dashboard a bit complicated."
"A great idea would be to make a mobile application for the ImmuniWeb portal so that all information would be available on the go and from a mobile phone as well. It would be much more convenient."
"Its technical support could be better."
"The product’s interface for the web applications could be similar to Android and iOS versions."
"It would be better if they had an automated tagging feature. The tagging functionality currently requires manual tagging, and that's probably the most needed feature from my standpoint. We also do not have enough tools, enough features, or options to display different resources in the way we need. There are basic grouping and some filtering features, but we still cannot fully separate some flavors of our resources. However, we may not be aware of the latest features."
"The deployment process on the cloud is straightforward, while on-premise can be complex. Support is generally excellent, although there can be delays in ticket resolution."
"Qualys CyberSecurity Asset Management is moderately good, while Rapid7 is slightly much better."
"Qualys CSAM is not super responsive, and there can be delays sometimes, especially with the network passive sensor. You might see duplicate objects which eventually disappear but it takes time. If that can be done faster, it will be great."
"Currently, whenever the agent is running, it consumes over ten percent of my CPU, indicating that CPU consumption is another area Qualys needs to address."
"I think the one thing Qualys CyberSecurity Asset Management can do better is the package management and the updating process."
"Further research and development are needed to enhance integration with other cloud agents and products, particularly improving communication with external products and vendors."
"It is automatically exporting the vulnerabilities and the assets. However, it would be useful to have the ability to select or to filter which we would like to export."
"They should address the false positives generated in EASM. It is fetching assets that have Infosys as the keyword. They should fix that."
"In my opinion, the area that needs improvement is the role-based access control (RBAC). The access privilege management needs to be more robust and streamlined to enhance user access management. Additionally, improvements to the user interface could be beneficial."
 

Pricing and Cost Advice

"The values of ImmuniWeb are currently significantly below what is valued in the Chilean market for these services and solutions."
"ImmuniWeb is relatively cheap. It's a competitive price compared to other products in the marketplace. It's worth the money we are paying for it."
"I use the product's free version. The tool costs around 229 dollars."
"The platform is expensive if a large development is involved. However, it is less expensive for scheduled-based testing, quarterly or in a year."
"It is pretty expensive."
"There should be the flexibility to change or add pricing, especially for pay-per-use cases."
"It is pretty expensive."
"The pricing for Qualys CSAM is nominal."
"The pricing is market-competitive."
"Though the solution is considered expensive, if bundled with other services such as VMDR or cloud agents, its value would significantly increase. It is currently a bit costly, but with bundling, it could become attractive to more customers."
"The cost for Qualys CyberSecurity Asset Management is high."
"Qualys CyberSecurity Asset Management can be expensive, especially if we already have VMDR."
"It is cost-effective because, in a single tool, we are getting everything. All the solutions come in a single license or price."
"The pricing is fair. I would love to see the price come down a little bit, but we do get a lot of value out of it. We are squeezing every ounce of value we can out of the tool."
"The Qualys Cybersecurity Asset Management pricing is well-aligned with our usage."
report
Use our free recommendation engine to learn which Attack Surface Management (ASM) solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Construction Company
11%
Comms Service Provider
10%
Computer Software Company
8%
Financial Services Firm
15%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise2
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise23
 

Questions from the Community

What do you recommend for a securing Web Application?
That's one of the most critical questions any development team faces! Securing a web application requires a layered approach, not a single tool. Here is a quick breakdown of what to recommend: In...
What needs improvement with Qualys CyberSecurity Asset Management?
I think the one thing Qualys CyberSecurity Asset Management can do better is the package management and the updating process. Knowing that you can't update any of the packages until you've done the...
What is your primary use case for Qualys CyberSecurity Asset Management?
I primarily use it for a small, single-site, multi-source setup with multi-WAN inputs. I have a main fiber connection and a couple of failovers while managing different networks across different se...
 

Overview

 

Sample Customers

Ebay, United Nations, Next Bank Credit Agricole, Geneva Swiss Bank, Banca Stato, Celgene, SIM University, Heymarket, Swissquote, more...
Information Not Available
Find out what your peers are saying about ImmuniWeb vs. Qualys CyberSecurity Asset Management and other solutions. Updated: April 2026.
900,747 professionals have used our research since 2012.