No more typing reviews! Try our Samantha, our new voice AI agent.

ImmuniWeb vs Qualys CyberSecurity Asset Management comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ImmuniWeb
Ranking in Attack Surface Management (ASM)
27th
Average Rating
8.2
Reviews Sentiment
7.8
Number of Reviews
7
Ranking in other categories
Static Application Security Testing (SAST) (36th)
Qualys CyberSecurity Asset ...
Ranking in Attack Surface Management (ASM)
2nd
Average Rating
9.0
Reviews Sentiment
7.0
Number of Reviews
35
Ranking in other categories
Vulnerability Management (8th), Patch Management (5th), Cyber Asset Attack Surface Management (CAASM) (2nd), Software Supply Chain Security (2nd)
 

Mindshare comparison

As of September 2026, in the Attack Surface Management (ASM) category, the mindshare of ImmuniWeb is 1.6%, up from 0.6% compared to the previous year. The mindshare of Qualys CyberSecurity Asset Management is 3.4%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Attack Surface Management (ASM) Mindshare Distribution
ProductMindshare (%)
Qualys CyberSecurity Asset Management3.4%
ImmuniWeb1.6%
Other95.0%
Attack Surface Management (ASM)
 

Featured Reviews

Vivek Ashvinbhai Pancholi - PeerSpot reviewer
Senior Cybersecurity Consultant at a tech consulting company with 1,001-5,000 employees
Commendable Solution with Robust Vulnerability Detection Mechanism Suitable for Global Market
The solution helped us with one of our clients in the New York area contacted us about a data breach. In response, we swiftly organized a case meeting involving our client, internal, and email customer support teams. Together, we conducted an incident response, facilitating offline assistance for proper planning and risk management processes. We delved into the details of the data breach, identified how it occurred, and collaborated to rectify the issue. The client expressed satisfaction with the resolution process.
CM
SENIOR MANAGER, CYBERSECURITY THREAT, RISK & ARCHITECTURE at a tech vendor with 1,001-5,000 employees
Has accelerated vulnerability remediation by syncing with asset ownership data
Qualys CyberSecurity Asset Management has Qualys Query Language that works within itself. However, when switching to other modules the QQL either doesn't work or requires a different query to access the information, including in dashboards. They need to make their query language universal across the entire product so when using one module and making a query, it doesn't require changing the query to work in another module.The stability has decreased significantly on the product in the last couple of months. It takes considerable time to log into the product, and sometimes access is denied. Screens take long to load and occasionally crash. The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have managed to deliver to my clients the services of Ethical Hacking in less time, with better deliverables, and other key differentiators that make my company more competitive in the local market."
"After the assessment, you clearly know which assets require penetration testing."
"I like the fully automated continuous discovery run by ImmuniWeb in the background. We do not need to rerun the same tests or the same scanning against our resources. We need to supply our IP addresses, domain names, and significant resources with special domain names and URLs, and we need to do it only once. Then we always have an up-to-date picture. I also like the integration with our single sign-on system. We do not need to maintain a separate set of usernames or user accounts. We can plug this ImmuniWeb service into our authentication technology, enabling two-factor authentication. We have secure authentication right out of the box. The other important feature I like is the executive view. You can easily switch from a technical view to an executive view and have a helicopter view of the compliance status. We can see how much effort is required and our current status."
"The most valuable features are the SLA of Zero false-positives, less time of service development, validation of unlimited patched vulnerabilities, and several others."
"The solution's most valuable feature is reporting."
"ImmuniWeb is stable."
"The ImmuniWeb Platform is the best and easiest way to secure a business online."
"The initial setup process is user-friendly."
"There are no stability issues, and I would rate it a ten out of ten."
"Regarding return on investment, I first look at the reality of the environment and the decrease in critical vulnerabilities with Qualys CyberSecurity Asset Management, which equals a positive return on investment."
"Tags are very useful for us since we can tag virus applications in infrastructure types such as databases, operating systems, or web platforms."
"Getting different kinds of modules and inventory in one solution is good enough."
"The end-of-life and end-of-service software and hardware are some of my favorite features."
"ESAM covers the entire attack surface, discovers more, and provides complete details about the assets, such as the external interface and internal interface, correlating them so we get the complete details of the assets, which were not given by the other solution."
"The most valuable aspect we receive from Qualys is the remediation."
"The best features of Qualys CyberSecurity Asset Management include its ability to scan and consider each and every endpoint based on the target we have given. This makes it stand out."
 

Cons

"The product’s interface for the web applications could be similar to Android and iOS versions."
"A great idea would be to support using Discovery on the internal network, allowing delivery of all the features of the current Discovery to internal network resources."
"A great idea would be to make a mobile application for the ImmuniWeb portal so that all information would be available on the go and from a mobile phone as well. It would be much more convenient."
"The deployment process on the cloud is straightforward, while on-premise can be complex. Support is generally excellent, although there can be delays in ticket resolution."
"You may find the dashboard a bit complicated."
"Its technical support could be better."
"ImmuniWeb sometimes shows previous scans instead of running tests."
"It would be better if they had an automated tagging feature. The tagging functionality currently requires manual tagging, and that's probably the most needed feature from my standpoint. We also do not have enough tools, enough features, or options to display different resources in the way we need. There are basic grouping and some filtering features, but we still cannot fully separate some flavors of our resources. However, we may not be aware of the latest features."
"Sometimes both updates and software types appear together on one list, making it hard to differentiate."
"The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance."
"We have had challenges modifying the agent configuration. Particularly, when we want to change the tenant that the agent is pointing to, we have had difficulties making that reliable and working properly."
"The activity log is terrible."
"It is automatically exporting the vulnerabilities and the assets. However, it would be useful to have the ability to select or to filter which we would like to export."
"There can be further simplification to reduce the overall noise and provide ESAM-related data."
"We've received very poor guidance from them, especially after learning several things we need to fix during the Qualys conference."
"Further research and development are needed to enhance integration with other cloud agents and products, particularly improving communication with external products and vendors."
 

Pricing and Cost Advice

"The platform is expensive if a large development is involved. However, it is less expensive for scheduled-based testing, quarterly or in a year."
"It is pretty expensive."
"ImmuniWeb is relatively cheap. It's a competitive price compared to other products in the marketplace. It's worth the money we are paying for it."
"I use the product's free version. The tool costs around 229 dollars."
"It is pretty expensive."
"There should be the flexibility to change or add pricing, especially for pay-per-use cases."
"The values of ImmuniWeb are currently significantly below what is valued in the Chilean market for these services and solutions."
"The cost for Qualys CyberSecurity Asset Management is high."
"The pricing is reasonable relative to the features provided, as it collects all module data and operates as a main, centralized inventory, making it a cost-effective solution."
"The pricing is fair. I would love to see the price come down a little bit, but we do get a lot of value out of it. We are squeezing every ounce of value we can out of the tool."
"The pricing for Qualys CSAM is nominal."
"Qualys CyberSecurity Asset Management can be expensive, especially if we already have VMDR."
"The pricing for Qualys Cybersecurity Asset Management is reasonable, with an annual subscription costing around $1,000 per year or a monthly subscription starting at approximately $72 per month, depending on the specific package and features included."
"The Qualys Cybersecurity Asset Management pricing is well-aligned with our usage."
"Though the solution is considered expensive, if bundled with other services such as VMDR or cloud agents, its value would significantly increase. It is currently a bit costly, but with bundling, it could become attractive to more customers."
report
Use our free recommendation engine to learn which Attack Surface Management (ASM) solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Comms Service Provider
12%
Construction Company
11%
Outsourcing Company
8%
Financial Services Firm
14%
Comms Service Provider
9%
Outsourcing Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise2
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise23
 

Questions from the Community

What do you recommend for a securing Web Application?
That's one of the most critical questions any development team faces! Securing a web application requires a layered approach, not a single tool. Here is a quick breakdown of what to recommend: In...
What needs improvement with Qualys CyberSecurity Asset Management?
I think the one thing Qualys CyberSecurity Asset Management can do better is the package management and the updating process. Knowing that you can't update any of the packages until you've done the...
What is your primary use case for Qualys CyberSecurity Asset Management?
I primarily use it for a small, single-site, multi-source setup with multi-WAN inputs. I have a main fiber connection and a couple of failovers while managing different networks across different se...
 

Overview

 

Sample Customers

Ebay, United Nations, Next Bank Credit Agricole, Geneva Swiss Bank, Banca Stato, Celgene, SIM University, Heymarket, Swissquote, more...
Information Not Available
Find out what your peers are saying about ImmuniWeb vs. Qualys CyberSecurity Asset Management and other solutions. Updated: August 2026.
913,924 professionals have used our research since 2012.