Qualys VMDR vs The NodeZero Platform by Horizon3.ai comparison

Qualys VMDR vs. The NodeZero Platform by Horizon3.ai

Download the complete report

Helped 881,707 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys VMDR

Ranking in Vulnerability Management

3rd

Ranking in Risk-Based Vulnerability Management

1st

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

IT Asset Management (3rd), Configuration Management Databases (3rd), Container Security (9th)

The NodeZero Platform by Ho...

Ranking in Vulnerability Management

11th

Ranking in Risk-Based Vulnerability Management

5th

Average Rating

9.0

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

Advanced Threat Protection (ATP) (12th), Penetration Testing Services (1st), Breach and Attack Simulation (BAS) (1st)

Mindshare comparison

As of February 2026, in the Vulnerability Management category, the mindshare of Qualys VMDR is 5.0%, down from 9.2% compared to the previous year. The mindshare of The NodeZero Platform by Horizon3.ai is 1.5%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management Market Share Distribution
Product	Market Share (%)
Qualys VMDR	5.0%
The NodeZero Platform by Horizon3.ai	1.5%
Other	93.5%

Vulnerability Management

Featured Reviews

Vaibhav Ghule

Soc Lead & Edr Administration at Persistent Systems

Continuous risk-based monitoring has strengthened incident response and vulnerability prioritization

I haven't explored Qualys VMDR's vulnerability lifecycle automation yet. One of my analysts mentioned that queries lack grouping operators in Qualys VMDR. From my experience, I would appreciate improvements in the query options in Qualys VMDR, specifically in the query-building process where I would need more features and operators. Additionally, we have been facing issues with Qualys on the cloud level. We cannot download the configuration profile from the cloud agent, and it is showing a pending action for download. During 2025, we noticed outages of Qualys a couple of times. I want to mention that there is an issue with receiving timely RCA deliveries. While this is not necessarily about the tool, it relates to support. The support has not been very responsive, and we are receiving RCAs a little delayed whenever we raise support cases or communicate with the TAMs. Additionally, the UI has a slight latency, which I and my team have experienced. They have also reported this latency issue when navigating through different pages.

Read full review

Shaun Hunt

Chief Information Officer at a construction company with 1,001-5,000 employees

Has unified our IT teams by providing clear visibility into network vulnerabilities and accelerated remediation with real-world attack testing

One of the things that we've shared with Horizon is just the reporting. They've made a lot of changes over time, but when examining computers, most average normal people don't look at a computer and identify it as 114.82.117.180. They identify it as 'the printer for accounting.' When many of the reports give the very detailed technical IP address or serial number, that's really not helpful for anyone other than the person, the hands-on person that's trying to remediate it. All the managers, all the leaders, having information in that format isn't helpful. Being able to have information about what those devices are would be very helpful. There's a technical reason they can't just have an easy button because some people have really complicated networks. When examining things for the average company, the average executive, that 114 number, there's only one of those. But if examining an AT&T or a Walmart, it isn't unique. They haven't solved that problem. But for the 90% of companies, being able to have just a human readable name for all devices on your network in all of the reports all of the time would be the most beneficial.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Qualys VM's best features are vulnerability management and customizable scoring."

"The features that are most valuable are the identification, scan features, and the identification of vulnerabilities."

"The Vulnerability Management and Patch Management features are the most valuable features of this solution."

"Monitors workstations and servers for vulnerabilities and creates reports."

"The most valuable features of Qualys VMDR include patch management and the use of virtual scanners to scan appliances and devices, especially those provided by vendors where we cannot manage them ourselves."

"The initial setup is straightforward."

"Qualys VMDR provides us with a quick response to threat findings through regular scheduled scanning, which improves our security operations."

"It's also highly customizable, allowing us to tailor it to our needs."

More Qualys VMDR pros

"For us, The NodeZero Platform is literally the single best security solution we have because the way that it works is we're able to scan every part of our network, both internally and externally, and then get completely actionable feedback that doesn't matter if it's for an application developer or a network admin."

"I rate the stability of the NodeZero Platform a ten out of ten."

"Penetration testing and scans are useful features."

"Overall, I'd rate NodeZero at nine to 9.5 out of ten."

"Honestly, it's one of the most transformational technologies we've implemented in our company."

"The NodeZero Platform is amazing; what I love most about it is that it's automated and comparable to the manual pen testing we did with a third-party company, but with the added benefit of unlimited retesting to validate fixes."

"After the third party conducts the pen test, The NodeZero Platform is run, and it finds the same things they found and sometimes a few other things that they did not even identify."

"The NodeZero Platform's real attack capabilities help in identifying vulnerabilities on our on-prem systems because it provides actual vulnerabilities by attacking our systems."

More The NodeZero Platform by Horizon3.ai pros

Cons

"There needs to be better documentation."

"Qualys VM could improve by having more skilled support personnel."

"Qualys could improve the inbuilt dashboards."

"There were some issues later with Qualys VMDR regarding security, specifically with numerous false positive reports."

"Integration could be better. When you think about scanning, it's not used just with this product alone but with other Qualys products. If you think about the bundle, the product itself is good. But integration with other products and packages has space for improvement. They should also offer a better price for bundles."

"The support has not been very responsive, and we are receiving RCAs a little delayed whenever we raise support cases or communicate with the TAMs."

"I would like to have CSPM, a continuous scan-like cloud added to the solution."

"They're still evolving their platform in terms of reporting capabilities."

More Qualys VMDR cons

"They've added a chatbot which isn't particularly useful, but when it can't answer questions, it forwards messages to human support."

"I think The NodeZero Platform could improve by leveraging GPUs for password cracking, which would be pretty good."

"The speed of the scans takes some time, but in my opinion, it is not surprising for what it is doing."

"The reports are quite useless."

"I encountered challenges with patch management, as we struggled to test and implement patches due to time constraints. This led to our patch management process being ineffective."

"You need to be cautious about what it scans, as it could potentially cause issues."

"The only issue we’ve encountered is that sometimes the scans take a long time to complete."

"The areas for improvement for The NodeZero Platform involve integration and automation. It would be beneficial if it could integrate directly with vulnerability management tools that would allow the platform to automatically import data, identify vulnerable systems, and test targets immediately, potentially even enabling automated feedback loops for rescanning since the process is currently manual."

More The NodeZero Platform by Horizon3.ai cons

Pricing and Cost Advice

"The solution is reasonably priced for the value it provides."

"Usually every implementation is different and the quote is in function of number of assets."

"The license is on a yearly basis."

"Qualys VM is better suited for medium to large companies because the price can be too much for smaller customers."

"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."

"It is different for every company, but for us, it's every three years."

"There are no additional fees in addition to the standard licensing fees."

"Qualys VM is reasonably priced."

More Qualys VMDR pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

881,707 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

10%

Manufacturing Company

Government

Computer Software Company

Manufacturing Company

Comms Service Provider

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	12
Large Enterprise	70

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	1
Large Enterprise	4

Questions from the Community

What do you like most about Qualys VMDR?

I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...

What is your experience regarding pricing and costs for Qualys VMDR?

My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.

What needs improvement with Qualys VMDR?

What do you like most about Horizon3.ai?

Penetration testing and scans are useful features.

What needs improvement with Horizon3.ai?

I think The NodeZero Platform could improve by leveraging GPUs for password cracking, which would be pretty good.

What is your primary use case for Horizon3.ai?

We use The NodeZero Platform for control validation and we are also looking for the likelihood of vulnerabilities.

Rapid7 InsightVM vs Qualys VMDR

Comparisons

Compared 9% of the time

Tenable Nessus vs Qualys VMDR

Compared 8% of the time

Tenable Security Center vs Qualys VMDR

Compared 5% of the time

Microsoft Defender Vulnerability Management vs Qualys VMDR

Compared 5% of the time

Wiz vs Qualys VMDR

Compared 4% of the time

More Qualys VMDR Competitors

Pentera vs The NodeZero Platform by Horizon3.ai

Compared 25% of the time

Tenable Security Center vs The NodeZero Platform by Horizon3.ai

Compared 6% of the time

Cymulate vs The NodeZero Platform by Horizon3.ai

Compared 6% of the time

Tenable Vulnerability Management vs The NodeZero Platform by Horizon3.ai

Compared 5% of the time

Picus Security vs The NodeZero Platform by Horizon3.ai

Compared 2% of the time

More The NodeZero Platform by Horizon3.ai Competitors

Product Reports

Qualys VMDR

Download Qualys VMDR product report

The NodeZero Platform by Horizon3.ai

Download The NodeZero Platform by Horizon3.ai product report

The NodeZero Platform by Horizon3.ai report

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security

Horizon3.ai

Overview

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Qualys

NodeZero by Horizon3.ai is an offensive security platform that enables users to adopt an attacker’s perspective, reveal vulnerabilities, and verify defense effectiveness with evidence-backed insights.

NodeZero provides autonomous pentesting, showing how attackers exploit misconfigurations, credentials, and exposures into attack paths. It helps focus on real risks rather than hypothetical ones, integrating seamlessly into existing IT and security workflows to streamline processes. The platform drives risk-based vulnerability management and CTEM by validating vulnerabilities and measuring resilience.

What standout features improve your security?

Autonomous Pentesting at Scale: Executes extensive pentests across broad IT landscapes swiftly.
Hybrid Cloud Coverage: Navigates on-premises and cloud domains to find attack paths.
Proof of Exploitation: Offers evidence for every finding.
Fix Validation: Allows quick retesting to ensure vulnerabilities are resolved.
NodeZero Tripwires: Uses deception tokens for real adversary detection.

What benefits should you expect from reviews?

Reduced Vulnerability Noise: Prioritizes exploitable risks with ServiceNow integration.
Automated Workflows: MCP Server automates processes, reducing bottlenecks and enhancing efficiency.
Immediate Fix Validation: Ensures defenses work during attacks.
Real-Time Resilience Measurement: Helps schedule routine assessments without external help.

NodeZero assists in automated penetration testing and vulnerability management in industries like finance and healthcare. It enhances security processes by complementing or replacing existing solutions, enabling efficient testing, feedback, and control validation.

Horizon3.ai

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

Government agencies, Defense Industrial Base organizations, and enterprises in regulated industries such as finance, healthcare, manufacturing, and criticalinfrastructure rely on NodeZero to meet rigorous security and compliance requirements with continuous, scheduled, and on-demand testing.

Qualys VMDR vs. The NodeZero Platform by Horizon3.ai