Try our new research platform with insights from 80,000+ expert users
reviewer1500162 - PeerSpot reviewer
Chief Information Officer/Senior Vice President at a tech services company with 51-200 employees
Real User
Helps prioritize which security patches need to be deployed on specific equipment
Pros and Cons
  • "The prioritization feature is great. I think it has all of the advanced features that we need."
  • "It's too early for me to say if there is any room for improvement since we're in the first couple of months of using this solution."

What is our primary use case?

It's used for vulnerability assessments, assessment of IT equipment, PCs, servers. It's supposed to help prioritize which security patches need to be deployed on that equipment.

What is most valuable?

The prioritization feature is great. I think it has all of the advanced features that we need.

What needs improvement?

It's too early for me to say if there is any room for improvement since we're in the first couple of months of using this solution. So far, we've been pretty happy about it. Nothing comes to mind that is negative.

Given that it's really new, we're really trying to use all of the features and get a good comfort level and gain more experience in it. For this reason, I can't speak negatively of it, yet.

For how long have I used the solution?

We've been using Qualys for roughly six to seven years, but we've only been using Qualys VMDR for a few months.

Buyer's Guide
Qualys VMDR
June 2025
Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
861,524 professionals have used our research since 2012.

What do I think about the stability of the solution?

Qualys VMDR is very stable.

What do I think about the scalability of the solution?

Qualys VMDR is definitely scalable.

How are customer service and support?

They provide a lot of free virtual training to really understand the technology and the solution. That's a plus for them.

Which solution did I use previously and why did I switch?

I used to work with QualysGuard VM — an older version. The earlier version didn't have the detection response that we needed, that's why this time it has the detection response. VMDR is the evolution of the solution.

How was the initial setup?

The initial setup was pretty straightforward. Deployment was quick.

What about the implementation team?

We implemented this solution ourselves.

What other advice do I have?

Overall, on a scale from one to ten, I would give this solution a rating of eight. For us, it's just more of gathering more experience. The more we learn, I think we'll appreciate it, and then maybe from that point, we'll be able to say it's a nine, or a ten. It's more on us versus the solution.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Director Transformación Digital at oesia
Real User
A feature-rich, complete product, and the multilingual technical support is good
Pros and Cons
  • "I like Qualys because it is a very complete product, more so than Tenable."

    What is our primary use case?

    We use this product for vulnerability management.

    What is most valuable?

    I like Qualys because it is a very complete product, more so than Tenable. It has vast capabilities.

    For how long have I used the solution?

    We have been working with Qualys VM for a very short time, perhaps six months.

    What do I think about the stability of the solution?

    This is a stable solution.

    What do I think about the scalability of the solution?

    Scalability-wise, this is a good product.

    How are customer service and technical support?

    The technical support is very good and they have it both in Spanish and English.

    Which solution did I use previously and why did I switch?

    We are also working with Tenable SC. Qualys is both more complete and for us, better in terms of pricing.

    How was the initial setup?

    For a beginning, the initial setup is complex. You have to have some knowledge for setting it up and using it.

    What's my experience with pricing, setup cost, and licensing?

    The price of Qualys for us is better than Tenable, although that is only because we are partners. The retail price of Qualys is higher than that of tenable. The pricing and licensing for Qualys could be improved.

    What other advice do I have?

    Overall, this is a good product and I recommend it, mainly because of the capabilities and the management using a single console. I can even create a calendar for activities from the main screen.

    I would rate this solution a nine out of ten.

    Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
    PeerSpot user
    Buyer's Guide
    Qualys VMDR
    June 2025
    Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
    861,524 professionals have used our research since 2012.
    Network and security Pre-sales Engineer at a tech services company with 51-200 employees
    MSP
    A reliable, affordable, safe, scalable, and easy-to-use solution for vulnerability management and policy compliance
    Pros and Cons
    • "There are many features. Its reliability, ease of installation, ease of use, and the richness of the information provided are the most valuable features."
    • "Its integration with ServiceNow and other similar products is complicated and can be improved. It should also have virtual batching. They should support more standards and compliance requirements and more customizations. For policy compliance, they can add the standards required by the countries in the Middle East. Each country generates its own standards and frameworks, and those frameworks should be there in all products, not only in Qualys. The market here is huge, especially in the cybersecurity field. Qatar has a framework for Qatar 2022, and each and every company in the public or private sector has to follow the Qatar 2022 framework."

    What is our primary use case?

    We are a system integrator. We implement Qualys for our customers for vulnerability management and policy compliance. We are not using Qualys as a product in our company. We have public, private, and hybrid cloud as well as on-premises deployments.

    What is most valuable?

    There are many features. Its reliability, ease of installation, ease of use, and the richness of the information provided are the most valuable features.

    What needs improvement?

    Its integration with ServiceNow and other similar products is complicated and can be improved. It should also have virtual batching.

    They should support more standards and compliance requirements and more customizations. For policy compliance, they can add the standards required by the countries in the Middle East. Each country generates its own standards and frameworks, and those frameworks should be there in all products, not only in Qualys. The market here is huge, especially in the cybersecurity field. Qatar has a framework for Qatar 2022, and each and every company in the public or private sector has to follow the Qatar 2022 framework. 

    For how long have I used the solution?

    I have been using this solution for three years.

    What do I think about the stability of the solution?

    Qualys is a reliable, strong, and solid product. 

    What do I think about the scalability of the solution?

    It is scalable. The main advantage of Qualys is that it is a cloud-based solution because of which you can scale it up or down according to your needs. It is very quick and flexible.

    How are customer service and technical support?

    Because we are in the Middle East, we deal with the office in Dubai. You cannot imagine how supportive they are. They are amazing in their response.

    How was the initial setup?

    The initial setup was easy. It has great hardware. Its deployment was easier than Rapid7, which is a bit complicated. Tenable is less complicated, but Qualys is faster and easier to deploy than Tenable. 

    I deployed Qualys in two hours. It is easy to install, manage, and go through. There are multiple tabs, and everything is understandable.

    What's my experience with pricing, setup cost, and licensing?

    Qualys is cheaper and more affordable than other solutions.

    What other advice do I have?

    I would recommend Qualys because it is a reliable, affordable, and very safe product. It can have everything that you are looking for.

    I would rate Qualys VM an eight out of ten.

    Disclosure: My company has a business relationship with this vendor other than being a customer. partner
    PeerSpot user
    it_user1189266 - PeerSpot reviewer
    Consultant at a tech services company with 11-50 employees
    Reseller
    Provides excellent security for scanning, flexible with good integration
    Pros and Cons
    • "Great web application security for scanning."
    • "Could use additional security for the app."

    What is our primary use case?

    We are consultants and resellers of Qualys VM. 

    What is most valuable?

    I like the solution's web application security for scanning, the solution is flexible with good integration. 

    What needs improvement?

    I'd like to see additional security for the app. The product lacks integrations for third party solutions or automation integration for other tools.

    For how long have I used the solution?

    I've been using this solution for six months. 

    What do I think about the stability of the solution?

    The product is 100% stable. There are five users in the company who deal with operations and security analysis. There are four people in the company who deploy and provide support.

    How are customer service and technical support?

    I've never used the technical support. Documentation is simple and complete. 

    Which solution did I use previously and why did I switch?

    I've previously worked with Tenable IO and Rapid 7. We switched because of Qualys's web application feature.

    How was the initial setup?

    The initial setup is straightforward. Initial deployment takes between two and four hours. We did it ourselves. 

    What other advice do I have?

    I would recommend this solution. 

    I would rate this solution a 10 out of 10. 

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Microsoft Azure
    Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
    PeerSpot user
    reviewer1342815 - PeerSpot reviewer
    Consultant at a media company with 51-200 employees
    Real User
    Enables us to check the validity of legacy applications, infrastructure, and simple data operating systems
    Pros and Cons
    • "The initial setup was good. We didn't have any problems with it."
    • "The ability to manage user accounts and give rights to the operator to know about abnormalities of applications is something that needs improvement."

    What is our primary use case?

    I use Qualys to review the validity of legacy applications, infrastructure, and simple data operating systems.

    What needs improvement?

    The ability to manage user accounts and give rights to the operator to know about abnormalities of applications is something that needs improvement. 

    The pricing is also expensive.

    For how long have I used the solution?

    I have been using Qualys for four years. 

    What do I think about the stability of the solution?

    It's stable.

    How are customer service and technical support?

    I haven't needed to use technical support. 

    How was the initial setup?

    The initial setup was good. We didn't have any problems with it. 

    What other advice do I have?

    I would rate Qualys VM a ten out of ten. 

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer1307133 - PeerSpot reviewer
    IT Consultant Supervisor at a financial services firm with 5,001-10,000 employees
    Consultant
    Scans our security posture and has very good scalability
    Pros and Cons
    • "It's a good product. After the scan our internet works well. It scans our security posture."
    • "The reporting needs improvement. It should generate much more stuff like field reports."

    What is our primary use case?

    We use Qualys to check the status of our security posture.

    How has it helped my organization?

    Qualys help identifies the weakness in our critical infrastructure and provides guidelines how to address them.

    What is most valuable?

    maybe compliance monitoring.

    What needs improvement?

    Reporting can be improved more. It should generate much more stuff like field reports. Though the reports generally meet our need we hope we can customize it better.

    For how long have I used the solution?

    2 years

    What do I think about the stability of the solution?

    very satisfactory

    What do I think about the scalability of the solution?

    Its scalability is a four or five out of five. 

    How are customer service and technical support?

    We haven't had problems up until this point that required technical support. The solution can run by itself and generate reports. We didn't have any issues that would need us to call technical support.

    Which solution did I use previously and why did I switch?

    None

    How was the initial setup?

    Simple and straightforward

    What about the implementation team?

    in-house.

    What was our ROI?

    acceptable.

    What's my experience with pricing, setup cost, and licensing?

    I would give the pricing three out of five.

    Which other solutions did I evaluate?

    No.

    What other advice do I have?

    I would like for Qualys to have the ability to scan OT operation technology assets as well. 

    If it can I would rate it 8 out of 10. 

    Which deployment model are you using for this solution?

    On-premises
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer1228836 - PeerSpot reviewer
    Solutions Architect at a tech services company with 10,001+ employees
    Real User
    A lightweight solution with good reporting, but multi-cloud support should be improved
    Pros and Cons
    • "The most valuable feature is that this solution is very lightweight."
    • "I would like to see this solution simplified to work more easily in a multi-cloud environment."

    What is our primary use case?

    We are a solution provider and this is one of the products that we implement for our clients. We do a lot of work with containers. With respect to containerization, security is important for us and we regularly check the market to see what solutions are available in these areas.

    This solution is primarily used for container security and compliance. Moving into any environment, in particular, one that is cloud-based, our clients want to make sure that things are okay from a compliance perspective. We generate reports and they can see whether there are any violations. If they see violations or security breaches during the audit then they have to be addressed.

    What is most valuable?

    The most valuable feature is that this solution is very lightweight.

    What needs improvement?

    I would like to see this solution simplified to work more easily in a multi-cloud environment. One of our customers has more than 3,000 servers across multiple regions, and they were asking about security and vulnerability checking in an automated fashion. This could be done with a cloud-based service that monitors all of the deployments, pulls the data from the containers, and checks for compliance.

    For how long have I used the solution?

    We have been dealing with Qualys for at least three years, which is when our container journey began. At that point, our proposals did not deal with security for containers because our customers did not ask for it, but now it is something that we recommend.

    How are customer service and technical support?

    The technical support for this solution is good. We are required to solve any kind of security issue whin two hours, so these are critical tickets. The entire instance usually has to come down until the fix is delivered.

    Which other solutions did I evaluate?

    We often demonstrate these types of tools to the enterprise architecture team, who will ultimately decide which solutions they are going to implement based on their environment and requirements.

    We are completely agnostic with respect to which tools our customers decide to implement. As an engineering team, we implement what the customer wants. In the case of Qualys and other solutions, we download the information and pass it along to our customers. We also facilitate or set up communication between vendors and customers to best help our clients.

    We do try to learn about who the providers are and what differentiates their solutions from others. Sometimes our customers do not know very much about the products, so we try to provide as much insight as possible to facilitate their decision making. 

    What other advice do I have?

    A lot of our customers have a workload that is scattered across a multi-cloud environment. This means that some of the RFPs we answer are based on very large landscapes with distributed workloads.

    I would rate this solution a seven out of ten.

    Which deployment model are you using for this solution?

    Private Cloud
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer1248798 - PeerSpot reviewer
    Sr. Manager, Vulnerability Management at a transportation company with 10,001+ employees
    Real User
    Assists us with vulnerability management and policy compliance across our network
    Pros and Cons
    • "The most valuable features are vulnerability detection and the scanning capability to enable identification of vulnerabilities across our network."
    • "I would like to see this solution more developed and competitive in the Cloud space."

    What is our primary use case?

    Our primary uses for this solution are security vulnerability detection and policy compliance.

    How has it helped my organization?

    It's been the chosen solution year after year for vulnerability management and our vulnerability management program is centered around this tool.

    What is most valuable?

    The most valuable features are vulnerability detection and the scanning capability to enable identification of vulnerabilities across our network.

    What needs improvement?

    I would like to see this solution more developed and competitive in the Cloud space.

    For how long have I used the solution?

    We have been using Qualys VM for fifteen years.

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    Buyer's Guide
    Download our free Qualys VMDR Report and get advice and tips from experienced pros sharing their opinions.
    Updated: June 2025
    Buyer's Guide
    Download our free Qualys VMDR Report and get advice and tips from experienced pros sharing their opinions.