Try our new research platform with insights from 80,000+ expert users
Qualys Patch Management Logo

Qualys Patch Management pros and cons

Vendor: Qualys
4.5 out of 5
Badge Leader

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Qualys Patch Management significantly reduces organizational risk by automating patch deployment and ensuring compliance.
The service and support provided by Qualys are exceptional, offering real-time assistance and solutions.
Qualys Patch Management improves patch rates dramatically, achieving high compliance and vulnerability mitigation.
Features such as automatic scheduling, on-demand patching, and comprehensive dashboards streamline vulnerability management processes.
Qualys Patch Management excels with features that include the integration of Qualys Gateway Scanner, saving bandwidth by caching and distributing patches efficiently.

CONS

Qualys Patch Management lacks built-in driver updates and has limitations in patch deployment compared to SCCM.
Improvement is needed in handling vulnerabilities on VMware and other virtualized environments, along with more user-friendly reporting.
Some patches require OEM consent, creating issues for seamless automation.
The pricing is considered high, creating affordability challenges for many companies.
False positives and difficulties with the Cloud Agent are significant concerns.
 

Qualys Patch Management Pros review quotes

reviewer2590236 - PeerSpot reviewer
Oct 31, 2024
Qualys Patch Management offers a valuable feature that allows for deferred reboots, giving users control while still ensuring eventual patching.
ShantanuChoubal - PeerSpot reviewer
Dec 11, 2024
The most valuable features of Qualys Patch Management include its ability to automate patch deployment for hundreds or thousands of assets, reducing our reliance on the IT team to perform these tasks manually.
RO
Oct 18, 2024
Patch Management, if configured correctly, works effectively without requiring further action.
Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
852,098 professionals have used our research since 2012.
AN
May 19, 2025
Overall, I would rate Qualys Patch Management a ten out of ten for everything.
Brad Mathis - PeerSpot reviewer
Jun 10, 2024
The most valuable feature in Patch Management is the Qualys query language for set-it-and-forget-it patching for our preapproved patches, and our preapproved schedules, That is extremely helpful compared to the old days of patching.
Arshad Nr - PeerSpot reviewer
Nov 5, 2024
The features I find most valuable in Qualys Patch Management include the ability to manage registry changes and run scripts both pre and post-patching. We have been able to apply workarounds for zero-day vulnerabilities efficiently.
Yuvaraaj Adhithya - PeerSpot reviewer
Aug 20, 2024
For a few applications, you do not need to go and download the patches from the network or somewhere else. They have the patches or the latest updates in the directory. You can just select a patch and deploy it to a server. You can create a patch job and select the patch. Everything is within the interface. You do not need to go out of it.
reviewer2589096 - PeerSpot reviewer
Oct 30, 2024
Qualys Patch Management has significantly reduced our organizational risks.
Revathi VeeraRaghavan - PeerSpot reviewer
Dec 5, 2024
Qualys Patch Management offers numerous valuable features, including automatic patching for Google browsers, which allows for scheduled updates immediately upon vendor release.
Darrell Elmore - PeerSpot reviewer
Oct 17, 2024
Patch Management gave my side and the security side a single pane of glass and the ability to better coordinate the delivery of patches.
 

Qualys Patch Management Cons review quotes

reviewer2590236 - PeerSpot reviewer
Oct 31, 2024
Currently, there are limitations in downloading patch jobs to view all associated assets and patch statuses.
ShantanuChoubal - PeerSpot reviewer
Dec 11, 2024
It works with Windows and Linux, but Mac patch support is not yet available.
RO
Oct 18, 2024
Qualys can do regular check-ins to go over not only all the vulnerabilities but also the overall process to see if there is anything where we might need improvement.
Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
852,098 professionals have used our research since 2012.
AN
May 19, 2025
Initially, I was confused about where to find and how to use the available features. It was challenging to identify the options we could employ and why we were using them.
Brad Mathis - PeerSpot reviewer
Jun 10, 2024
A common area for improvement in Patch Management, both within our environment and others I've encountered, is the lack of built-in driver updates.
Arshad Nr - PeerSpot reviewer
Nov 5, 2024
They need to improve the user-friendliness of identifying how many devices are affected by a particular patch. It is not intuitive, and there should be clearer indicators or buttons to access this information easily.
Yuvaraaj Adhithya - PeerSpot reviewer
Aug 20, 2024
One of the challenges that we have faced with the Patch Management tool is that you cannot patch all the things. There are some limitations, whereas, in SCCM, we can create a package and just deploy that through it. Anything is deployable through SCCM, whereas Patch Management is very selective.
reviewer2589096 - PeerSpot reviewer
Oct 30, 2024
Qualys could improve its randomized download feature and provide more detailed information about patch failures, including the reason for failure.
Revathi VeeraRaghavan - PeerSpot reviewer
Dec 5, 2024
Reporting needs enhancement, particularly with group-based compliance percentages and clearer, VMDR-like reporting in the Patch Management module.
Darrell Elmore - PeerSpot reviewer
Oct 17, 2024
A patch contract is a bundle of patches that we are going to roll out. I would like to reference those patches from separate jobs. They explained at a conference that it cannot be done, but that is my main complaint. I wish that the whole schema was a little bit clearer because there is a little bit of cloudiness around it.