

Qualys VMDR and Flexera One are products competing in the cybersecurity and IT asset management space. Flexera One has the upper hand due to its comprehensive features, although Qualys VMDR excels in pricing and customer support.
Features: Qualys VMDR offers real-time visibility and automated risk assessment, integrated vulnerability management, and continuous monitoring. Flexera One provides powerful asset tracking, enhanced software license optimization and multi-cloud management capabilities.
Room for Improvement: Qualys VMDR could enhance its asset management capabilities, improve its learning curve, and expand integration with third-party tools. Flexera One may benefit from simplifying its deployment process, broadening its vulnerability management features, and reducing its overall complexity.
Ease of Deployment and Customer Service: Qualys VMDR boasts straightforward deployment with robust customer support, offering a faster time-to-value. On the other hand, Flexera One, while comprehensive, involves a steeper learning curve but compensates with thorough customer service.
Pricing and ROI: Qualys VMDR provides an affordable entry cost ensuring immediate cost-effectiveness, with attractive ROI for core vulnerability management. Flexera One, with higher setup costs, promises substantial long-term ROI through extensive asset management and optimization features.
We saw a return on investment through significant savings in time, money, and resources.
They were prompt in getting back to us.
We usually get on calls with tech support, and they are very helpful.
The response time takes a while.
The technical support provided by Qualys is pretty good.
Scalability depends on the license and the number of assets being monitored.
Qualys VMDR can handle scalability, although increasing the inventory can raise the licensing costs.
Qualys VMDR's scalability is good, and the customer support is good.
The stability of the cloud version, which is what I'm currently using, is almost always reliable.
Qualys VMDR is stable.
For one of my customers, the monitoring aspect has been tricky due to the need for live database information, which could be enhanced using AI technology.
One feature I would like to see in the tool is the ability to handle everything in one place.
It does not automate patching unless the patch management module is purchased separately.
If AI features were integrated, it could enhance the capabilities significantly.
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually.
They've restructured how it's licensed, making it more fair.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
Qualys offers better pricing and is feature-packed compared to other tools.
Flexera includes what I call canned reports, straight out of the box, but they also offer flexibility in creating custom reports.
The feature that I find most valuable in Flexera One is the discovery, which is crucial from an ITAM point of view to capture the entire environment and all the software installed in my customer's environment.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
| Product | Market Share (%) |
|---|---|
| Qualys VMDR | 2.5% |
| Flexera One | 4.9% |
| Other | 92.6% |


| Company Size | Count |
|---|---|
| Small Business | 1 |
| Midsize Enterprise | 1 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 12 |
| Large Enterprise | 70 |
Flexera manages and optimizes enterprise software regardless of location, from the desktop to the datacenter to the cloud. We give mid-size enterprises a growth path and a roadmap for success.
Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.
Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.
With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.
We monitor all IT Asset Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.