

Qualys Exposure Management and Armis are leaders in vulnerability and asset management solutions, each offering unique features that cater to security needs. Based on the comparison, Armis stands out in real-time visibility and asset security across diverse environments, which may give it an edge for organizations with extensive IT, OT, and IoT environments.
Features: Qualys Exposure Management offers agent-based scanning, dynamic tagging, and robust vulnerability detection, making it effective for distributed workforces. It provides dashboards for real-time views and integrates with various systems. Armis is known for agentless asset discovery, superior real-time visibility, and integration across IT, OT, and IoT environments.
Room for Improvement: Qualys could improve reporting capabilities, onboarding efficiency, and integration between modules. Users report issues with complex user rights management and UI inconsistencies. Armis can enhance geographic reach and integration with third-party tools. Improved role-based access control and AI-driven insights could better meet market needs.
Ease of Deployment and Customer Service: Qualys operates well across cloud environments but struggles with technical support responsiveness and consistency in deployments. Armis offers straightforward deployment with its agentless architecture and provides quick technical support and customer service, though occasional delays occur.
Pricing and ROI: Qualys is often seen as expensive, with costs escalating based on the number of managed assets, yet offers significant ROI by reducing risks. Armis is priced in the mid-range and offers feature-rich solutions that justify its cost, providing strong asset visibility and risk management benefits.
There is a 98% reduction in vulnerability workloads, enabling focus only on high-risk issues.
I have seen a return on investment with Armis, as it definitely improved remediation with fewer employees.
Leads to lower mean times for incident resolution and facilitating consolidation against legacy infrastructure.
We saw a return on investment through significant savings in time, money, and resources.
We have seen a return on investment through reduced employee counts and decreased incident resolution times.
I have not faced challenges with Armis support, as pre-sales engineers have been helpful.
I would rate it ten out of ten.
Customer support has been challenging for Armis, particularly in the APAC region, where their presence is minimal.
The GUI in Qualys Enterprise TruRisk Management is excellent.
We usually get on calls with tech support, and they are very helpful.
False positives are the main issue that we encounter and need to be handled by the support team.
As a SaaS platform, it is highly scalable.
Customers typically enjoy the solution and do not face any issues both before deployment during the POC and after deployment once they release the PO and get the implementation done.
Armis handles scalability well, particularly during mergers and acquisitions.
It is flexible and scalable, and we can use it and modify it as per our needs.
Scalability depends on the license and the number of assets being monitored.
Scalability is not a challenge.
Qualys VMDR is stable.
This tool has good and excellent performance in the companies that we sell to in the last months for customers, so stability is evident.
I rate the stability of Qualys Enterprise TruRisk Management at eight point five out of ten because I occasionally find bugs that are frustrating, and I have already commented on the support issues.
Armis cannot be used as a standalone solution and should be integrated with other solutions.
The needed improvements I see include implementing cloud features, as the market, particularly in Brazil, is moving to cloud environments to reduce costs and time spent on upgrades and server management.
It misses out on a lot of vulnerabilities.
The main issue is the reporting delay, and sometimes the Qualys Enterprise TruRisk Management agent will not scan the system, which means we do not receive accurate reports in a timely manner.
It does not automate patching unless the patch management module is purchased separately.
If AI features were integrated, it could enhance the capabilities significantly.
The pricing starts at around $39k per year or $3,250 per month.
Armis pricing is average, neither cheaper nor more expensive than other solutions.
The price is not very high.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
Qualys offers better pricing and is feature-packed compared to other tools.
Armis is very easy to implement due to its agentless design and offers a granular level of visibility for all assets in the network.
It assesses open vulnerabilities, provides traffic flow insights, integrates with ticketing workflows, and aggregates security solutions like Active Directory and EDR.
Armis provides full visibility on OT devices and in the medical industry for devices such as ECG machines, X-rays, and infusion pumps.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
| Product | Mindshare (%) |
|---|---|
| Qualys Exposure Management | 9.7% |
| Armis | 2.7% |
| Other | 87.6% |


| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 3 |
| Large Enterprise | 9 |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 12 |
| Large Enterprise | 75 |
Armis is a comprehensive cybersecurity solution used for continuous monitoring and threat detection across IT and IoT devices. It excels in spotting vulnerabilities, managing device compliance, and tracking assets to enhance security protocols and network management. Key features include real-time threat detection, comprehensive visibility, and granular risk assessments. Armis boosts organizational productivity by streamlining workflows and enhancing operational accuracy.
Qualys VMDR is a comprehensive cybersecurity tool offering vulnerability management, patch management, and continuous monitoring with real-time asset discovery. It delivers scalable, cloud-based solutions that enhance security operations without additional infrastructure.
Qualys VMDR provides a robust platform for enterprise security, integrating vulnerability management, compliance, and asset inventory for full visibility across cloud and on-premises environments. It features a comprehensive dashboard with threat intelligence-driven prioritization and remediation capabilities. Users benefit from accurate assessments via agent-based scanning and appreciate the intuitive, customizable scanning and reporting interface. However, there's room for improvement in false positive reduction, UI simplification, and integration capabilities, along with enhancements in asset management for large-scale deployments and the vulnerability database. Enhancing technical support speed, patch management, compliance standards, and inter-module navigation would further enrich user experience.
What are the key features of Qualys VMDR?
What benefits can users expect when evaluating Qualys VMDR?
Qualys VMDR is widely used in industries needing stringent security and compliance measures, offering comprehensive vulnerability and compliance management. It is deployed to secure web applications, servers, and crucial assets, supporting a wide range of sectors by ensuring policy adherence and vulnerability tracking through its powerful cloud platform.
We monitor all Risk-Based Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.