Qualys VMDR and BMC Helix Discovery are competitive in vulnerability management and infrastructure visibility, respectively. Qualys VMDR has the upper hand in vulnerability management due to its comprehensive feature set, while BMC Helix Discovery is favored for strong infrastructure insights.
Features: Qualys VMDR includes continuous monitoring, policy compliance, and automated assessments. BMC Helix Discovery provides automated service mapping, integration with IT management tools, and application dependency mapping.
Room for Improvement: Qualys VMDR has an outdated user interface, complex reporting features and faces challenges with false positives. BMC Helix Discovery requires better IoT and cloud scanning and is not very user-friendly for customization.
Ease of Deployment and Customer Service: Qualys VMDR is versatile, supporting various environments such as public and private clouds but has mixed reviews on customer service. BMC Helix Discovery is ideal for on-premises and hybrid cloud deployments, praised for reliable customer service.
Pricing and ROI: Qualys VMDR is considered expensive with significant ROI from improved vulnerability management, while BMC Helix Discovery offers good value for large enterprises with its complex licensing possibly increasing costs.
BMC Helix Discovery has delivered a very good return, and we cannot stop using it at this moment.
We saw a return on investment through significant savings in time, money, and resources.
When opening a severity one ticket, they respond within four to six hours, which is commendable.
The response has been satisfactory, though improvements could be made in response time and overall competence.
We usually get on calls with tech support, and they are very helpful.
I am satisfied with the support of Qualys VMDR as they are supportive.
When reaching out via email, they reply quickly.
Scalability depends on the license and the number of assets being monitored.
Qualys VMDR can handle scalability, although increasing the inventory can raise the licensing costs.
Qualys VMDR's scalability is good, and the customer support is good.
In the past four to six years, I cannot recall encountering any bugs.
Qualys VMDR is stable.
I would like to see a lower price and better technical support.
It uses a Berkeley database, and the query language is not easy to master for performing complex queries.
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually.
If AI features were integrated, it could enhance the capabilities significantly.
It does not automate patching unless the patch management module is purchased separately.
The price is about twelve per license per year, and the support is included.
Qualys offers better pricing and is feature-packed compared to other tools.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
This is very useful for compliance as it helps in audits by providing a comprehensive view of all assets and software.
What we're looking for and trying to move towards is autonomous operations so that AI is implemented to suggest resolutions and to quickly identify faults or repeated patterns with no human intervention.
The best aspect of BMC Helix Discovery is its flexibility. You can perform scanning at any time, and it provides substantial data for extraction.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
The best features Qualys VMDR offers include built-in threat intelligence for prioritizing high-risk vulnerabilities and integrated patch management to remediate a vulnerability, providing coverage on the network level and on the OS level as well.
| Product | Market Share (%) |
|---|---|
| BMC Helix Discovery | 6.6% |
| Qualys VMDR | 3.0% |
| Other | 90.4% |
| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 5 |
| Large Enterprise | 13 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 12 |
| Large Enterprise | 69 |
BMC Discovery, formerly ADDM, is a digital enterprise management solution that automates asset discovery and application dependency mapping to build a holistic view of all your data center assets and the relationships between them.
Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.
Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.
With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.
We monitor all IT Asset Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
