Qualys Patch Management Reviews

Name: Qualys Patch Management
Brand: Qualys
Rating: 4.5 (34 reviews)

4.5 out of 5

34 reviews
97% willing to recommend

What is Qualys Patch Management?

Qualys Patch Management optimizes patching and vulnerability remediation through automation and intelligence insights, accelerating the process by 43% and improving patch rates by 90%. Its integration with CMDB and ITSM tools speeds up ticket closures by 60%, effectively reducing the attack surface while freeing IT and security resources. This cloud-based solution bridges the IT-security gap, making it essential for cybersecurity.

Get the Qualys Patch Management Buyer's Guide and find out what your peers are saying about Qualys Patch Management, Microsoft Configuration Manager, BigFix and more!

Qualys Patch Management is the #4 ranked solution in top Patch Management solutions. PeerSpot users give Qualys Patch Management an average rating of 9.0 out of 10. Qualys Patch Management is most commonly compared to Microsoft Configuration Manager: Qualys Patch Management vs Microsoft Configuration Manager. Qualys Patch Management is popular among the large enterprise segment, accounting for 65% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Buyer's Guide

Qualys Patch Management

May 2025

Get the report

Helped 851,491 peers since 2012

Featured Qualys Patch Management reviews

Revathi VeeraRaghavan

Information Security - Manager at Infosys

We have prioritized products for automated patching. This means that whenever a vendor releases a patch, it is seamlessly and robustly applied. Qualys VMDR detects vulnerabilities and correlates them with relevant patches in the Qualys Patch Management module. Although separate databases, they work together to provide a comprehensive solution for identifying and remediating vulnerabilities. When VMDR detects a vulnerability, it identifies corresponding patches released in the Patch Management module, streamlining the patching process. Before the pandemic in 2020, we relied on remote scanning, which limited our ability to deploy and manage patches effectively. Our on-premises SCCM server struggled to push patches to remote users relying on VPN. To address this, we deployed the Qualys Cloud Agent on all 360,000 assets in our infrastructure. This provided comprehensive vulnerability detection, unlike the limited results from remote scans. However, the sheer volume of vulnerabilities overwhelmed our SCCM server. Consequently, we collaborated with Qualys to develop a backend solution integrated with the Cloud Agent for seamless patch management. After successful testing and implementation, Qualys Patch Management now efficiently handles patching for Windows, Linux, and macOS devices. Qualys Patch Management provides a centralized platform for managing assets and vulnerabilities, enabling assessment, prioritization, and remediation. We rely on Qualys for both vulnerability detection and patch deployment. We initially faced challenges as the IT team was hesitant about Qualys Patch Management, and the deployment of cloud agents revealed millions of vulnerabilities. However, Qualys Patch Management significantly reduced these vulnerabilities, particularly on our Windows machines, which comprise 70 percent of our systems. The team observed a 70 percent remediation rate through scheduled patching, establishing Qualys as a reliable source of truth. Consequently, they shifted from relying on SCCM or Intune to Qualys Patch Management for scheduling patching jobs to meet our five-day SLA. With Qualys publishing QIDs the day after vendor patch releases, automated jobs promptly deploy patches to all machines upon vulnerability detection. Qualys Patch Management helps lower operational costs and enhances our security posture by reducing vulnerabilities and streamlining compliance efforts. I have observed an improvement in our patch rate using Qualys Patch Management. Qualys now facilitates over 80 percent compliance within five days, a task that previously required the IT team 12 days to accomplish. By integrating Patch Management with VMDR, we gain immediate vulnerability detections and leverage TruRisk values to derive our own severity rankings for prioritization. These prioritized vulnerabilities are then addressed using the Qualys Patch Management Module, streamlining our remediation process. Qualys Patch Management has helped reduce our organizational risk by providing current vulnerability data, including exploitability and active threat information. The platform's live threat feed and risk score enhance the standard CVSS rating by considering factors like active malware association and exploit availability, allowing us to prioritize patching efforts effectively.

Read full review

ShantanuChoubal

Project Lead at Persistent Systems

The most valuable features of Qualys Patch Management include its ability to automate patch deployment for hundreds or thousands of assets, reducing our reliance on the IT team to perform these tasks manually. It is able to fix most of our vulnerabilities. The count is reducing significantly. We do not have to rely on our IT team to manually log in to systems or deploy using the AD group. We can just put in a command and schedule the patches for our hundreds or thousands of assets. The vulnerability count has reduced significantly. Secondly, it helps us not just deploy a patch, it also helps us to install a particular software if it is required from an IT standpoint. Tomorrow, if the organization has a requirement for certain software to be installed on a device, Qualys Patch Management has that capability as well. It can install that software on the machine irrespective of whether it is a security tool or some other tool. We can just put in the URL or source path of it, and it will install that software. The last one is the registry remediation. It is not just limited to patch management or patch deployment. We can also create a script to fix a particular vulnerability that cannot be fixed through patch deployment. It might require logging into the system, opening the registry keys, and editing some values to it. We can create a script for that.

Read full review

Arshad Nr

Senior Security Consultant at CyberNxt Solutions LLP

Whenever Microsoft releases any zero-day vulnerabilities, they provide a workaround. We are able to push that workaround from the Patch Management module. We can push the registry key changes or use the PowerShell script. We push changes to almost 600 devices in ten minutes. It helps us ensure our infrastructure security. Qualys Patch Management has significantly improved our visibility into vulnerability remediation and patch severity. The solution has enabled us to remediate a large number of vulnerabilities and reduce our attack surface effectively. We can track live updates and present dashboards to management, which has increased their confidence in our security posture. We can see the progress while pushing the patches. We have VMDR dashboards and reports. The reports are user-friendly, and everyone can understand these reports. We could also present them to the management. They were also happy to see the progress. They had visibility. We have not implemented much automation. We are still in the early stages of this solution and testing out the possibilities. We had an issue because of the requirement that every server should be connected to the Internet before downloading the patches, but QGS was very helpful with that. QGS helps to ensure that we are able to patch devices that are not connected to the Internet. We are able to prioritize the vulnerabilities and remediation. We did not see any discrepancies. With some of the other tools I have used, I have seen so many discrepancies between the vulnerability and the patching. It helped our teams to work together. We created a separate team for vulnerability remediation. We also could help the patching team and support them in automating patch management. Previously, they were doing it manually on each server. With Qualys Patch Management, there is an increase in vulnerability remediation. We have remediated almost 100,000 vulnerabilities. That is a huge count. Previously, we used a formula to identify critical vulnerabilities, and we could remediate only a limited number of vulnerabilities. With Qualys Patch Management, we could remediate all the vulnerabilities. We did not exclude any of the vulnerabilities. There is also an increase in the patch rate. Previously, we could only cover 30% patching, whereas with Qualys Patch Management, within one and a half months, we could achieve 70% to 80% patching. The remaining ones are not included in the initial phase because of certain dependencies. We pushed data to almost 2,000 devices. It took some time for us to do the testing. We tested on ten production devices. After that, we pushed the patches to other devices. We can download reports and customize the report templates based on the information we need. Our management could clearly see where we are now as compared to before. They could see our progress. They could see that we have fixed all high-priority ones within a month. The remaining ones are of medium and low priority. Even if we do not remediate them, it will be fine. The Risk Reduction Recommendation Report helped us see which vulnerabilities would reduce the most risk within our organization.

Read full review

Qualys Patch Management mindshare

As of May 2025, the mindshare of Qualys Patch Management in the Patch Management category stands at 4.4%, up from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Patch Management

PeerResearch reports based on Qualys Patch Management reviews

Type	Title	Date
Category	Patch Management	May 19, 2025	Download
Product	Reviews, tips, and advice from real users	May 19, 2025	Download
Comparison	Qualys Patch Management vs Microsoft Configuration Manager	May 19, 2025	Download
Comparison	Qualys Patch Management vs BigFix	May 19, 2025	Download
Comparison	Qualys Patch Management vs Microsoft Windows Server Update Services	May 19, 2025	Download

Title	Rating	Mindshare	Recommending
Microsoft Configuration Manager	4.1	14.8%	90%	81 interviews Add to research
BigFix	4.3	10.1%	97%	97 interviews Add to research

Valuable Features

Qualys Patch Management offers valuable features such as a user-friendly interface, automated patch scheduling, and comprehensive vulnerability assessment. It supports registry modifications, script execution, and a flexible risk-based approach. Reporting tools provide real-time updates and clear dashboards for actionable insights. It efficiently manages patches across various operating systems and third-party applications, minimizing risks. Asset prioritization is streamlined, leading to faster remediation and improved security posture. Integration with other tools enhances its management capabilities.

"Overall, I would rate Qualys Patch Management a ten out of ten for everything."
"My overall rating for Qualys Patch Management is a ten out of ten."
"The consolidated report we received from the solution was very time-saving because, in the dashboard, we could get all the patch details for a particular patch and all the assets listed."

Room for Improvement

Qualys Patch Management lacks built-in driver updates and comprehensive third-party application support. It struggles with automation, integration, and error handling. The user interface is complex for beginners and requires clearer instructions. Pricing is high, and customer support needs improvement. Reporting, rollback options, and patch identification are insufficient. Enhancements are needed in patch availability, detection logic, dashboard visualization, and compatibility with virtualized environments. Additionally, integration with OEMs and improved patch verification processes would be beneficial.

"Initially, I was confused about where to find and how to use the available features. It was challenging to identify the options we could employ and why we were using them."
"False positives were the biggest concern. We also had some concerns with respect to the Cloud Agent."
"False positives were the biggest concern."

ROI

Organizations report varied results from Qualys Patch Management. While some find early measurement difficult, many highlight significant reductions in vulnerabilities, time, and resource usage. Users observe decreased operational complexity and faster patching, noting substantial cost efficiency. Vulnerability detection shows improvement, leading to reduced risks and increased security postures. Clients appreciate the insights provided without extensive manual intervention, leading to significant savings, despite the challenges in quantifying exact financial returns.

Pricing

Qualys Patch Management's pricing is often viewed as competitive, though some users find it slightly expensive compared to other solutions like Nessus. Many note its robust features and efficiency in vulnerability remediation justify the cost. Pricing can decrease per asset at scale, and recent bundles offer better value for smaller environments. While some desire more features for the cost, the service is generally rated reasonable and cost-effective by enterprise users.

"Qualys Patch Management comes as part of a bundled package with several modules, making it a cost-effective deal for us."
"Its price is competitive in the market. Compared to other solutions like Rapid7, Qualys offers a favorable price point and robust features."
"Qualys Patch Management offers a moderate price point, neither cheap nor expensive, considering its comprehensive functionality."

Popular Use Cases

Organizations primarily utilize Qualys Patch Management for vulnerability remediation and patch deployment. It manages and automates the process of identifying and applying critical patches across various operating systems, reducing time to remediate. Leveraging cloud agents, it simplifies deployment without the need for on-premise servers or VPNs. Qualys integrates with other tools for a unified view of vulnerabilities and is applied in environments to enhance security by promptly addressing high-severity vulnerabilities.

Service and Support

Qualys Patch Management customer service and support receive mixed feedback. Many users report efficient, responsive support with quick resolutions, rating it highly. Staffing improvements have enhanced the experience, though some find initial responses insufficient, necessitating escalation. Challenges arise from reliance on knowledge-based articles and issues scheduling live troubleshooting. Despite variability, high-priority cases often receive prompt attention, and dedicated account managers prove beneficial. Some appreciate the quick response within 48 hours, rating it nine or ten out of ten.

Deployment

Many found Qualys Patch Management straightforward with proper documentation. It required initial whitelisting in endpoint security systems. Single users or small teams handled the rollout, though larger teams expedited it. Cloud and on-premise deployments were manageable, sometimes involving hybrid systems. Initial setup required firewall configurations and asset tagging, with maintenance minimal as the platform largely self-manages. Occasional IT process challenges were noted, but automation helped ease the ongoing workload.

Scalability

Qualys Patch Management is highly scalable, dynamically expanding to meet organizational growth. Users rate its scalability ten out of ten, efficiently handling global deployments and large user bases. While most encounter no issues, multi-tenancy support could improve. Some users mention cost and usability considerations. Mac patch support is noted as lacking, but the platform effectively supports numerous devices and updates. Qualys frequently updates with new technologies, accommodating diverse user needs.

Stability

Qualys Patch Management is praised for its stability, often rated between eight and ten out of ten. Users note minimal latency or issues, often attributing them to their networks. Occasional problems have been reported due to cloud transitions or specific tasks, but these tend to be resolved quickly. The platform is deemed dependable, with proactive communication about maintenance, ensuring minimal downtime and fast resolutions for any unforeseen issues.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys Patch Management Buyer's Guide for additional reliable information.