Cycode vs Qualys CyberSecurity Asset Management comparison

Cycode vs. Qualys CyberSecurity Asset Management

Download the complete report

Helped 902,988 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cycode

Ranking in Software Supply Chain Security

10th

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (22nd), Software Composition Analysis (SCA) (17th), Application Security Posture Management (ASPM) (9th)

Qualys CyberSecurity Asset ...

Ranking in Software Supply Chain Security

2nd

Average Rating

9.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Vulnerability Management (6th), Patch Management (4th), Cyber Asset Attack Surface Management (CAASM) (3rd), Attack Surface Management (ASM) (3rd)

Mindshare comparison

As of July 2026, in the Software Supply Chain Security category, the mindshare of Cycode is 3.1%, down from 4.8% compared to the previous year. The mindshare of Qualys CyberSecurity Asset Management is 3.4%, up from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Software Supply Chain Security Mindshare Distribution
Product	Mindshare (%)
Qualys CyberSecurity Asset Management	3.4%
Cycode	3.1%
Other	93.5%

Software Supply Chain Security

Featured Reviews

reviewer2014131

DevSecOps Security Engineer at a manufacturing company with 10,001+ employees

Secret scanning has strengthened our code security and now needs better container integration

Regarding container scanning, Cycode can be improved as it does not have a CLI. As a DevSecOps professional, having a CLI is a must-have for any tool to integrate it into systems. Although Cycode does have a CLI, specifically for the container scanning module, a CLI does not exist. This is why all the modules that Cycode offers cannot be fully leveraged. A CLI for the container scanning module is believed to be on Cycode's roadmap, but it is not available today. As a big enterprise dealing with many assets, Cycode being faster would be beneficial. With many assets on-boarded on Cycode, the tool sometimes becomes slow. Making Cycode faster would definitely help. Other than that, things are good.

Read full review

Nicki Møller

Information Security Engineer at a manufacturing company with 5,001-10,000 employees

Enables automation and quick access to necessary information

One of the significant challenges Qualys is discovery, which I know Microsoft excels at. I can't recall how well Qualys performs this function; it seems I might be missing some details. However, if there's one key aspect to focus on, it's discovery—the ability to identify assets that you are not aware of, even when you can see they are present. Understanding what those assets are is crucial. With Qualys CyberSecurity Asset Management, it was very difficult to extract detections from the system. The features within Qualys are limited to what they have developed. Sometimes a complete overview is needed to push to a Power BI dashboard, Splunk, ServiceNow, or other platforms. The export process is incredibly challenging. We needed a developer to write a hundred-line Python script that would loop over certain assets due to export limitations. Qualys CyberSecurity Asset Management could improve its integration capabilities. While it generates substantial data, correlating it with other data sources can be challenging. The export process is difficult, and pre-built integrations with other tools could be enhanced for better process implementation.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cycode excels in secret scanning and is brilliant at finding and identifying secrets within code."

"Cycode has positively impacted the organization by saving time in the pipeline and providing one platform for secret scanning, SAST, and Infrastructure as Code facilities."

"I appreciate the feature that simplifies cloud security posture, offering insights into vulnerabilities, and reducing the complexity of managing the security program."

"We have had zero attacks since we enabled all the features in Qualys CSAM."

"When you implement a dynamic tag using a query, you do not need to manually tag all the servers. It categorizes all the servers that come under that query. The tagging part is automatically done within a few minutes. It reduces the effort."

"Authorized and unauthorized software visibility is the best feature for me."

"The best feature is asset discovery through their cloud agent or IP-based scanning."

"Qualys CyberSecurity Asset Management offers valuable features such as continuous vendor support, rapid response times, dedicated vendor partnerships, and advanced technical capabilities for risk identification."

"I would rate Qualys CSAM a ten out of ten."

"I use it primarily with tagging, asset counts, and groups that we can put them in, and we also use it to tell if a device has been merged and seen in Qualys CyberSecurity Asset Management, so that's beneficial for us too."

More Qualys CyberSecurity Asset Management pros

Cons

"Regarding container scanning, Cycode can be improved as it does not have a CLI."

"Currently, Cycode does not have good container security, and while it is a full solution, companies desiring a single platform must seek additional tools to scan container images."

"In my opinion, the area that needs improvement is the role-based access control (RBAC). The access privilege management needs to be more robust and streamlined to enhance user access management. Additionally, improvements to the user interface could be beneficial."

"Sometimes both updates and software types appear together on one list, making it hard to differentiate."

"The scanning function could be improved."

"Currently, whenever the agent is running, it consumes over ten percent of my CPU, indicating that CPU consumption is another area Qualys needs to address."

"The deployment is somewhat complicated and could be made more user-friendly for most users. It is currently not user-friendly for all users. It is good but can be improved. It is a new product, and they are working on it."

"Some areas that would be helpful are more comprehensive tagging and the ability to set up better dynamic rules."

"They should address the false positives generated in EASM. It is fetching assets that have Infosys as the keyword. They should fix that."

"We've received very poor guidance from them, especially after learning several things we need to fix during the Qualys conference."

More Qualys CyberSecurity Asset Management cons

Pricing and Cost Advice

Information not available

"Qualys CyberSecurity Asset Management can be expensive, especially if we already have VMDR."

"The pricing is reasonable relative to the features provided, as it collects all module data and operates as a main, centralized inventory, making it a cost-effective solution."

"The pricing is fair. I would love to see the price come down a little bit, but we do get a lot of value out of it. We are squeezing every ounce of value we can out of the tool."

"It is cost-effective because, in a single tool, we are getting everything. All the solutions come in a single license or price."

"Qualys is competitively priced for its features. Its pricing is suitable for large organizations with more than 4,000 assets, but for smaller organizations with few assets, such as banks, the costs might be high. They should come up with packages that are suitable for small organizations."

"The cost for Qualys CyberSecurity Asset Management is high."

"Though the solution is considered expensive, if bundled with other services such as VMDR or cloud agents, its value would significantly increase. It is currently a bit costly, but with bundling, it could become attractive to more customers."

"The Qualys Cybersecurity Asset Management pricing is well-aligned with our usage."

More Qualys CyberSecurity Asset Management pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.

See recommendations

902,988 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

23%

Financial Services Firm

14%

University

Computer Software Company

Financial Services Firm

15%

Computer Software Company

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	2
Large Enterprise	23

Questions from the Community

What is your experience regarding pricing and costs for Cycode?

Cycode is aggressively priced across the board with respect to other tools when it comes to pricing, setup cost, and licensing.

What needs improvement with Cycode?

What is your primary use case for Cycode?

Cycode is used for multiple types of scanning including secrets, SAST scanning, and IAC misconfiguration scanning. Secret scanning was one of the first services launched using Cycode and is integra...

What is your experience regarding pricing and costs for Qualys CyberSecurity Asset Management?

I'm not entirely sure about the pricing; I don't know.

What needs improvement with Qualys CyberSecurity Asset Management?

I think the one thing Qualys CyberSecurity Asset Management can do better is the package management and the updating process. Knowing that you can't update any of the packages until you've done the...

What is your primary use case for Qualys CyberSecurity Asset Management?

I primarily use it for a small, single-site, multi-source setup with multi-WAN inputs. I have a main fiber connection and a couple of failovers while managing different networks across different se...

Axonius vs Qualys CyberSecurity Asset Management

Comparisons

Snyk vs Cycode

Compared 15% of the time

Apiiro vs Cycode

Compared 13% of the time

ArmorCode vs Cycode

Compared 7% of the time

Ox Security vs Cycode

Compared 7% of the time

SonarQube vs Cycode

Compared 6% of the time

More Cycode Competitors

Compared 6% of the time

Armis vs Qualys CyberSecurity Asset Management

Compared 5% of the time

Rapid7 Metasploit vs Qualys CyberSecurity Asset Management

Compared 4% of the time

CrowdStrike Falcon vs Qualys CyberSecurity Asset Management

Compared 3% of the time

Bitsight vs Qualys CyberSecurity Asset Management

Compared 3% of the time

More Qualys CyberSecurity Asset Management Competitors

Product Reports

Application Security Posture Management (ASPM)

Download Cycode product report

Qualys CyberSecurity Asset Management

Download Qualys CyberSecurity Asset Management product report

Qualys CyberSecurity Asset Management report

Overview

Cycode is a comprehensive security platform designed to protect the software development lifecycle by securing source code and detecting vulnerabilities early in the code distribution process.

Cycode integrates seamlessly into development workflows to ensure the integrity and security of code repositories. By automating secret detection and providing robust threat detection, Cycode builds a resilient security framework for code. It offers scanning capabilities that identify misconfigurations and tracks code leaks across distributed environments, allowing teams to act quickly and effectively. By leveraging advanced analytics, it provides insightful data to mitigate security threats proactively.

What are the key features of Cycode?

Secret Detection: Automatically identifies confidential information hardcoded into the repository to prevent unauthorized access.
Misconfiguration Scanning: Detects and alerts about potential configuration issues that can lead to security vulnerabilities.
Code Leak Detection: Monitors and tracks unintentional source code exposure across environments.
Threat Detection: Provides real-time alerts and insights on suspicious activities in the codebase.

How can Cycode improve your outcomes?

Enhanced Security Posture: Helps maintain a secure development environment by stopping threats before they escalate.
Reduced Risk: Minimizes the likelihood of data breaches by securing code practices.
Operational Efficiency: Automates the detection process, saving time and resources for developers and security teams.
Comprehensive Visibility: Offers detailed analytics to improve strategic decision-making regarding code security.

In industries such as finance, healthcare, and technology, Cycode is implemented to safeguard critical code infrastructure by providing proactive threat detection and code compliance features that meet stringent regulatory standards. It facilitates seamless security integration in cloud environments, enabling industries to maintain compliance and ensure the protection of sensitive data throughout development cycles.

Cycode

Qualys CyberSecurity Asset Management provides key features including asset inventory management, end-of-life tracking, dynamic tagging, and integration with CMDB, offering extensive visibility and support for proactive threat response.

Qualys offers comprehensive visibility across hardware and software assets, aiding in tracking unauthorized applications and facilitating automated vulnerability remediation. Its user-friendly interface and dynamic risk scoring enhance security posture management. Users leverage it for vulnerability management and compliance, benefiting from real-time risk identification and efficient operations in cloud and on-premises environments.

What are the key features of Qualys CyberSecurity Asset Management?

Asset Inventory Management: Provides detailed visibility over hardware and software assets.
End-of-Life Tracking: Helps identify technical debt by pinpointing outdated hardware and software.
Dynamic Tagging: Allows flexible classification and categorization of assets.
Real-Time Risk Identification: Detects risks as they arise, enhancing threat response capabilities.
CMDB Integration: Streamlines data integration for comprehensive asset insights.

What benefits should users look for in Qualys reviews?

Improved Security Posture: Enables proactive threat management and streamlined operations.
Efficient Remediation: Automates vulnerability management and patch deployment.
User-Friendly Operations: Simplifies cybersecurity operations with an intuitive interface.
Comprehensive Asset Visibility: Offers unparalleled insight into organizational assets.
Scalable Solutions: Facilitates asset tracking across cloud and on-premises environments.

Cybersecurity teams in various industries, such as financial services, healthcare, and manufacturing, utilize Qualys to manage technical debt through end-of-life tracking and facilitate robust patch management. It supports compliance and visibility initiatives, essential for maintaining data integrity and operational security in dynamic environments.

Qualys

Cycode vs. Qualys CyberSecurity Asset Management