Try our new research platform with insights from 80,000+ expert users

Cymulate vs Qualys Enterprise TruRisk Management comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 18, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cymulate
Ranking in Continuous Threat Exposure Management (CTEM)
2nd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Threat Intelligence Platforms (TIP) (9th), Breach and Attack Simulation (BAS) (1st), Attack Surface Management (ASM) (10th)
Qualys Enterprise TruRisk M...
Ranking in Continuous Threat Exposure Management (CTEM)
15th
Average Rating
8.6
Reviews Sentiment
4.9
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

SB
Security Architec at Shikun & Binui
Support and integration enhance security posture over three years
I don't know if there's something that could be improved. They surprise me. As I mentioned, I returned a month ago. I haven't fully investigated the complete system yet. I must say that we have been with them for around three years. This is amazing because throughout these three years, they have supported us every week. We meet weekly to review results and fix issues together. Apart from occasional days off, this weekly support has been consistent for three years. It's remarkable because many products are sold and then the product teams forget about you, but this isn't the case with Cymulate.
Roshan Ugale - PeerSpot reviewer
Junior Associate at ESDS Software Solution Limited
Comprehensive risk scanning has protected servers and improves monthly vulnerability remediation
Qualys Enterprise TruRisk Management has a few things that need to be enhanced. First, there is the issue of superseded patches. Superseded means if we miss the current month patch, for example, if we miss the January patch to deploy on a particular server, Microsoft includes January changes in the second month security patch, and then the second month security patch includes all things in March. For example, if we miss two month patches and we directly deploy the March month security patch on a system, the other two patches, such as January and February, will be closed. Superseded means these patches are not deployed on a system, but after the latest one, which we already deployed, the older one does not need to be installed or deployed on a system. Qualys Enterprise TruRisk Management takes a report of each and every vulnerability and shows that the January month patch was not deployed on a system and the February month patch was not deployed on a system. However, that is not a proper scanning method. If we have already deployed the latest patch that includes the older security things or older security parameters and the latest parameters, when we deploy that latest patch, why does Qualys Enterprise TruRisk Management show the older patches also in potential vulnerabilities? That is a main factor that should be improved from Qualys Enterprise TruRisk Management. Second, the remedies provided by Qualys Enterprise TruRisk Management are sometimes not useful most of the time. In that case, we need to troubleshoot or find out the remedies by ourselves. The remedies will also be something that needs to be improved in the system or in the application.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature for us is the zero-day."
"The reporting capabilities are very good."
"Cymulate is easy to set up, install, and configure."
"Cymulate has positively impacted our organization by helping us to take care of the efficacy and reviewing the policies and configuration."
"With Cymulate, the best features are the capacity to test the EDR or malware, anti-malware solution."
"The security validation feature helps my organization in assessing our security posture."
"Qualys is a very good tool for companies, and the different tools this brand offers bring all the necessary tools for good development for these companies."
"Qualys Enterprise TruRisk Management is a very good software application to scan each and every vulnerability and, through that, it prevents the attackers from exploiting the systems, servers, or our data and prevents data leaks in short."
 

Cons

"The way Cymulate works for EDR could be improved, as it drops payload and requires action from the EDR console for remediation, which can block the whole process of Cymulate execution."
"The reporting process requires significant improvement as it often takes longer than expected and the quality is lacking."
"The product must provide consultancy for initial setup."
"I will be honest, we have it, but in the last year, I didn't maintain the system until a month ago."
"We have had some trouble with the agents."
"The cost can be quite high, and it impacts scalability as more simulations require additional expenses."
"When a customer does not have control over vulnerabilities or architecture and needs a solution that automates this function for the company, it can be difficult to identify the vulnerabilities."
"Second, the remedies provided by Qualys Enterprise TruRisk Management are sometimes not useful most of the time. In that case, we need to troubleshoot or find out the remedies by ourselves."
 

Pricing and Cost Advice

"Cymulate's services are expensive."
"The product is affordable."
Information not available
report
Use our free recommendation engine to learn which Continuous Threat Exposure Management (CTEM) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
10%
Manufacturing Company
8%
Comms Service Provider
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Large Enterprise3
No data available
 

Questions from the Community

What do you like most about Cymulate?
The most valuable feature for us is the zero-day.
What is your experience regarding pricing and costs for Cymulate?
I don't know if it's expensive. It depends on the modules that you want, or the time, because they give you a tenant. A tenant for you.
What needs improvement with Cymulate?
I don't know if that helped with quick decision making for my security team because I am the security team and you must have a dedicated team to work with this tool. I don't use the analytics modul...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

Euronext, YMCA, Telit, Nemours 
Information Not Available
Find out what your peers are saying about Cymulate vs. Qualys Enterprise TruRisk Management and other solutions. Updated: January 2026.
881,082 professionals have used our research since 2012.