No more typing reviews! Try our Samantha, our new voice AI agent.

Ivanti Patch for Configuration Manager [EOL] vs Qualys TruRisk Eliminate comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 4, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Ivanti Patch for Configurat...
Average Rating
7.6
Reviews Sentiment
6.4
Number of Reviews
2
Ranking in other categories
No ranking in other categories
Qualys TruRisk Eliminate
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
59
Ranking in other categories
Patch Management (1st)
 

Featured Reviews

reviewer2019633 - PeerSpot reviewer
Director at a tech services company with 1,001-5,000 employees
Provides detection logic that tells us which customer will record an update and is less expensive than other solutions
I haven't had experience with customer service and support, however, we did have an advisory case with one of their technical support staff. We were publishing and getting the full metadata for the patch. We were getting the full updates for the patch release. There was confusion as to why we were seeing that in the SCCM, instead of in the full metadata patch. The support person was able to help us in understanding what we were doing wrong, highlighting it could be a certificate issue. We generated a new certificate, and after they were applied, the issue was fixed. Overall, I would rate their customer service and support a five out of five.
PB
Vulnerability Management Engineer at a media company with 1,001-5,000 employees
Automated risk-based patching has reduced remediation time and meets SLAs across our hybrid estate
The best features Qualys TruRisk Eliminate offers include prioritizing the assets and automatically eliminating vulnerabilities without reaching out to the concerned team for timely and effective remediations. By using Qualys TruRisk Eliminate, we can remediate vulnerabilities on time. The biggest practical benefit of automating those remediations without involving the security team each time is that we can create security patches and automatically trigger them to all targeted devices. Qualys TruRisk Eliminate provides multiple models such as PM, cloud agent, cloud security, and total cloud. I am currently using multiple models, and everything helps me secure the devices. Regarding Qualys TruRisk Eliminate's AI capabilities, from the governance perspective, we can achieve vulnerabilities within a particular time frame. Its accuracy gives accurate results, and we can complete the activities as mentioned within the SLA. Basically, Qualys TruRisk Eliminate prioritizes vulnerabilities based on asset criticality, CVSS score, EPSS score, and the number of vulnerabilities. Combining these factors generates Qualys TruRisk values and helps prioritize vulnerabilities. It automatically fixes the vulnerabilities if any Qualys TruRisk value matches the conditions or rules. I use the solution's risk reduction recommendation report, which I assess for streamlining remediation. This helps identify vulnerabilities and fix them based on conditions such as asset criticality ranging from zero to five, the number of vulnerabilities, actively exploited vulnerabilities, and the Qualys Detection Score. Combining all these factors makes it achievable. I use Patch Management with Qualys VMDR. The integration is crucial because it automatically includes the relevant patches and configuration changes required to remediate vulnerabilities detected by VMDR without needing additional support from server owners. It patches the vulnerabilities via the agent. Qualys Patch Management's integration with Qualys TruRisk Eliminate influences the prioritization of patches for known exploited vulnerabilities or CISA catalog items by identifying and prioritizing vulnerabilities based on the Qualys TruRisk score, which incorporates multiple sources such as asset criticality, QDS, and the number of vulnerabilities. When evaluating and managing the potential operational impact of patch deployments or remediation actions for maintaining system uptime or application availability, I find that Patch Management does not require downtime on targeted devices and allows us to fix vulnerabilities during non-business hours.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Ivanti Patch for SCCM is the detection logic."
"This solution is stable."
"I've saved hundreds of hours of manual work for the IT operation teams by automating the deployment of critical patches, and I've reduced our real business exposure to ransomware and exploits."
"Qualys Patch Management provides a single source of truth for assets and vulnerabilities that require assessment, prioritization, and remediation."
"Qualys' best feature is its reporting. At first, it may seem a little complicated to a beginning user, but it's helpful once you get used to it. Most of these scans run automatically. We set the scans up for the client to run at daily, weekly, or monthly intervals, depending on how critical the server or other hardware is."
"Our patch rate was 85 percent before implementing Qualys Patch Management, and now it is 98 percent."
"Qualys Patch Management significantly improved our patch rates by 80 percent, scanning for vulnerabilities every four hours via the Qualys agent."
"The integration of Qualys Gateway Scanner is my favorite feature."
"Qualys Patch Management is integrated with the vulnerability management solution itself, making it more useful and automated."
"I rate Qualys Patch Management as a product and solution a nine point five."
 

Cons

"We have some problems with patches not installing successfully."
"In future releases, I would like to see improvements with the feature upgrade for the SCCM, which Microsoft has already integrated. Currently, Ivanti does not give us information about the enablement package."
"The patch status and patch completion information should be improved. If a patch fails due to some reason, such as a Windows error, the error code that gets published should be more detailed."
"The pricing of the solution is slightly high compared to other tools in our field."
"One downside of Qualys Patch Management is that I would love to see them speed up the process of verifying patches and then rolling them out."
"Qualys TruRisk Eliminate is strong overall, but the user interface and reporting could be made more intuitive."
"Qualys's current response time for releasing solutions to zero-day vulnerabilities, which takes approximately 12 to 16 hours, needs improvement."
"Qualys Patch Management's pricing could be more competitive, as it presents a significant obstacle for many companies who find it unaffordable."
"The GUI has areas that need improvement, particularly in the accuracy of results when adding dashboards and running queries."
"Customer support for Qualys Patch Management is lacking. The support cases we've raised often resulted in us finding the solution independently."
 

Pricing and Cost Advice

"We do not have a license with Ivanti, instead we buy just the plugins for the consoles, making it a much less expensive option versus other solutions."
"Qualys Patch Management's pricing could be more competitive, as it presents a significant obstacle for many companies who find it unaffordable."
"The pricing is reasonable and less expensive than the previous tool."
"Its price is competitive in the market. Compared to other solutions like Rapid7, Qualys offers a favorable price point and robust features."
"The licensing cost is more than 2,000 for the whole Americas region"
"Qualys is fairly priced."
"Qualys Patch Management comes as part of a bundled package with several modules, making it a cost-effective deal for us."
"Qualys Patch Management is expensive."
"Qualys Patch Management is a cost-effective solution for managing our 43,000-plus assets."
report
Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Retailer
11%
Legal Firm
10%
Outsourcing Company
10%
Outsourcing Company
10%
Financial Services Firm
10%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise7
Large Enterprise37
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Qualys Patch Management?
The pricing and licensing for Qualys TruRisk Eliminate were reasonable for the capabilities provided. The setup was straightforward, although the licensing structure could be a little simpler and m...
What needs improvement with Qualys Patch Management?
Qualys TruRisk Eliminate is strong overall, but the user interface and reporting could be made more intuitive. More customization in dashboards and easier integration with other security tools woul...
What is your primary use case for Qualys Patch Management?
My main use case for Qualys TruRisk Eliminate is to identify and prioritize critical security risks across our IT environment. Day-to-day, I use it to assess vulnerabilities, understand the risk le...
 

Also Known As

Patch for SCCM, Shavlik Patch for SCCM, Ivanti Patch for MEM
No data available
 

Overview

 

Sample Customers

University of Pittsburgh
Information Not Available
Find out what your peers are saying about Qualys, Microsoft, Ivanti and others in Patch Management. Updated: October 2026.
921,523 professionals have used our research since 2012.