

Pentera and Qualys CyberSecurity Asset Management are competing in the cybersecurity asset management category. Pentera is favored for its user satisfaction, largely due to its pricing and support, while Qualys offers a more comprehensive feature set, which may appeal to users seeking extensive capabilities.
Features: Pentera provides features such as automated security validation, continuous vulnerability assessment, and AI-based reporting for threat patterns. Qualys offers a robust asset inventory, dynamic tagging, and real-time risk identification, enhancing its utility as a comprehensive asset management tool.
Room for Improvement: Pentera could enhance integration options and expand its range of task automation. Streamlining the reporting process for non-technical users could also be an area for growth. Qualys may benefit from reduced setup complexity and enhanced clarity in its extensive feature documentation. Improving the user interface for less technical users and better handling of false positives are additional improvement areas.
Ease of Deployment and Customer Service: Pentera offers streamlined deployment with hands-on customer service, facilitating easy integration into existing systems. Qualys supports a comprehensive deployment strategy through strong support networks, which aids in catering to clients requiring thorough post-deployment assistance.
Pricing and ROI: Pentera is known for its reasonable setup costs, delivering high ROI with targeted security validation. Qualys, although associated with higher initial costs, promises long-term value via an extensive suite of features. Decision-makers will need to evaluate Pentera's affordability against Qualys's potential for broader impact in the long run.
Some customers consider the ROI favorable, but facing difficulties now due to changes in the licensing model, which has made it more expensive compared to last year.
Improvements to our security infrastructure contributed to overall business growth of approximately 150 percent over the past year.
By automating tasks, it significantly reduces the human resources required, leading to increased efficiency and productivity.
It has reduced the number of development and scripting hours along with maintenance hours.
The support team was knowledgeable and offered a variety of quick resolution options.
Their SMEs have sufficient knowledge, and if they are not the right contact, they quickly redirect us to someone who can help resolve issues.
I would rate their customer support a ten out of ten.
We have about 300,000 assets installed with agents worldwide.
The scalability is excellent as we manage more than one hundred thousand assets, including over one hundred thousand endpoints, approximately 2,600 servers, and more than 1,200 network devices.
Qualys Cybersecurity Asset Management has proven to be a highly scalable solution for us over the past couple of years.
I would rate the stability of Qualys CSAM a ten out of ten.
The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance.
They are constantly adding capabilities.
When the IP is imported into a system, we cannot withdraw or revoke the license.
Qualys is currently not able to identify assets lacking DNS information.
Features enhancing the interaction with IT or security teams should be added, such as a ticketing feature that, if an issue arises in the CSAM module, enables direct ticket creation in systems like ServiceNow.
If there's one key aspect to focus on, it's discovery—the ability to identify assets that you are not aware of, even when you can see they are present.
A cost-effective solution.
I believe that the stability and reliability of Qualys offer great value for the money.
A monthly subscription starting at approximately $72 per month, depending on the specific package and features included.
We can automate the Pentera processes by automatically creating scenarios to validate the system.
By correlating this with QDS scores, we can accurately assess the risk level of high or low QDS scores associated with each asset and monitor them accordingly.
The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments.
It also performs scans to identify any vulnerabilities, which helps to take proactive measures before those vulnerabilities are identified by any attacker.
| Product | Market Share (%) |
|---|---|
| Pentera | 24.1% |
| Cymulate | 15.9% |
| The NodeZero Platform by Horizon3.ai | 13.6% |
| Other | 46.4% |
| Product | Market Share (%) |
|---|---|
| Qualys CyberSecurity Asset Management | 10.9% |
| Axonius | 28.5% |
| Armis | 17.9% |
| Other | 42.7% |

| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 1 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 2 |
| Large Enterprise | 23 |
Pentera is the category leader for Automated Security Validation, allowing every organization to evaluate its security readiness, to know its real security risk at any given moment. Test all cybersecurity layers across the attack surface – inside and out – by safely emulating attacks & prioritize patching with a risk-based remediation roadmap.
Thousands of security professionals and service providers around the world use Pentera to guide remediation and close security gaps before they are exploited. For more info visit: pentera.io
Qualys CyberSecurity Asset Management provides key features including asset inventory management, end-of-life tracking, dynamic tagging, and integration with CMDB, offering extensive visibility and support for proactive threat response.
Qualys offers comprehensive visibility across hardware and software assets, aiding in tracking unauthorized applications and facilitating automated vulnerability remediation. Its user-friendly interface and dynamic risk scoring enhance security posture management. Users leverage it for vulnerability management and compliance, benefiting from real-time risk identification and efficient operations in cloud and on-premises environments.
What are the key features of Qualys CyberSecurity Asset Management?Cybersecurity teams in various industries, such as financial services, healthcare, and manufacturing, utilize Qualys to manage technical debt through end-of-life tracking and facilitate robust patch management. It supports compliance and visibility initiatives, essential for maintaining data integrity and operational security in dynamic environments.
We monitor all Breach and Attack Simulation (BAS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.