Qualys Policy Compliance Reviews

Qualys Policy Compliance offers customizable policies with comprehensive, lucid compliance reports. Users value the binary decision-making based on custom policies, integration with SIEM tools, and automation for real-time threat detection. The platform's ability to define enterprise policy, generate clear dashboards, and its extensive reporting enhances understanding. The interface supports asset scanning and automatic patching, and the integration with Confluence, Jira, and ServiceNow adds additional value. Predefined templates simplify compliance requirements application.

• "From the Qualys Policy Compliance, the best feature is that they have predefined templates for compliances, allowing easy application of compliance requirements against our products and providing clear reports on whether assets are compliant or not."
• "The solution's interface looks good, which enhances asset scanning and ensures automatic patching."
• "The reporting and security checks are valuable."

Qualys Policy Compliance requires enhancements in reporting capabilities, particularly in management and CI/CD pipelines. Users note challenges with policy versioning and implementation compared to CIS standards, leading to potential support overload. Faster technical support and improved detection features are desired. Users express a need for comprehensive educational resources and better alignment with automation languages like Python or Ansible, emphasizing improvements in policy creation and handling. Training for beginners would enhance user experience.

• "They need to improve the reporting part of the CI/CD pipelines and the ability to download scans from pods."
• "Some sort of education or knowledge base about the product would be beneficial for beginners."
• "The policy creation aspect needs improvement."