

Qualys VMDR and Tenable Security Center are both competing in the vulnerability management space. Qualys VMDR has the upper hand in pricing and support, while Tenable Security Center is viewed as more feature-rich, which aligns with its cost.
Features: Qualys VMDR highlights cloud-based vulnerability management, automatic patch management, and integration capabilities. Meanwhile, Tenable Security Center is recognized for distributed scanning, strong compliance reporting, and low false positives.
Room for Improvement: Qualys VMDR users desire better third-party integration, enhanced reporting, and improved user experience. Tenable Security Center could improve in intuitive configuration, integration, and patch management features.
Ease of Deployment and Customer Service: Qualys VMDR is flexible across cloud environments with a user-friendly interface, though some find the UI complex. Its technical support is responsive. Tenable Security Center requires more setup effort on-premises, and while support is well-rated, faster responses are beneficial.
Pricing and ROI: Qualys VMDR is considered expensive for small enterprises, but its value and ROI through vulnerability reduction are acknowledged. It offers a flexible pay-as-you-go model. Tenable Security Center’s pricing is competitive for larger implementations, though it can be a barrier for smaller enterprises.
We saw a return on investment through significant savings in time, money, and resources.
If we cannot adjust how to operate the solution, then it becomes very difficult, so hearing and initial tuning are very important.
Through the use of Tenable Security Center, my clients achieve more efficient patching and gain visibility and understanding of security operations, leading to improved resilience and infrastructure insight.
We usually get on calls with tech support, and they are very helpful.
The response time takes a while.
The technical support provided by Qualys is pretty good.
Longer response times and less thorough assistance.
They are helpful and were very helpful to us, coordinating with us on several issues.
Scalability depends on the license and the number of assets being monitored.
Qualys VMDR can handle scalability, although increasing the inventory can raise the licensing costs.
Qualys VMDR's scalability is good, and the customer support is good.
I can scale it extensively with the use of agents, allowing scanning in restrictive environments and loosely connected devices.
Scalability is a bit limited with Tenable Security Center.
Qualys VMDR is stable.
The stability of the solution is outstanding.
It does not automate patching unless the patch management module is purchased separately.
If AI features were integrated, it could enhance the capabilities significantly.
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually.
It's important for Tenable to catch up on testing capabilities that are present in solutions like Qualys.
The reports and plugins for reports and scans could benefit from enhancements.
Translating reports into European languages is especially relevant in Central Eastern Europe, where clients often require reports in local languages.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
Qualys offers better pricing and is feature-packed compared to other tools.
The product is somewhat pricey, reflecting its valuable features and status as a high-quality solution in the vulnerability management market.
Tenable Security Center is quite expensive, particularly for the CEE region, causing us to lose cases due to its pricing.
The price of Tenable Security Center is not so high; it's relatively a cheaper solution.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
We obtained good reports showing when patches were closed and the details of each patch, including who executed it and everything related to the patching process until it was closed.
Tenable Security Center provides an overall score of vulnerabilities, comparing an organization with others in the same industry.
The most effective feature of Tenable Security Center for detecting vulnerabilities is its capability for critical mapping.
| Product | Market Share (%) |
|---|---|
| Qualys VMDR | 12.5% |
| Tenable Security Center | 9.0% |
| Other | 78.5% |


| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 12 |
| Large Enterprise | 70 |
| Company Size | Count |
|---|---|
| Small Business | 22 |
| Midsize Enterprise | 10 |
| Large Enterprise | 27 |
Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.
Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.
With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.
Get a risk-based view of your IT, security and compliance posture so you can quickly identify, investigate and prioritize your most critical assets and vulnerabilities.
Managed on-premises and powered by Nessus technology, the Tenable Security Center (formerly Tenable.sc) suite of products provides the industry’s most comprehensive vulnerability coverage with real-time continuous assessment of your network. It’s your complete end-to-end vulnerability management solution.
We monitor all Risk-Based Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.