

Qualys VMDR and Microsoft Defender for Cloud Apps compete in the cybersecurity domain. Qualys VMDR seems to have the upper hand in vulnerability management due to its comprehensive asset tracking and compliance features, while Microsoft Defender for Cloud Apps stands out for its seamless integration within the Microsoft ecosystem.
Features: Qualys VMDR is known for its vulnerability management, asset tracking, and prioritization mechanism. It provides a comprehensive overview with detailed reports and customizable dashboards. Microsoft Defender for Cloud Apps offers features that excel in sensitive data detection, integration with Microsoft products, and capabilities in shadow IT discovery and session control.
Room for Improvement: Qualys VMDR can enhance its user interface, reduce false positives, and improve reporting functionalities. Microsoft Defender for Cloud Apps could benefit from better integration with non-Microsoft platforms, enhanced policy complexity, and improved third-party SaaS telemetry.
Ease of Deployment and Customer Service: Qualys VMDR is versatile in environments like public, private, and hybrid clouds with satisfactory customer support but slower response times. Microsoft Defender for Cloud Apps provides strong cloud deployment with good global technical support but faces limitations for non-Microsoft users.
Pricing and ROI: Qualys VMDR is perceived as expensive, though discounts help mitigate costs and it provides significant ROI by improving security posture. Microsoft Defender for Cloud Apps, included in Microsoft 365 E5 licenses, is economical when bundled but becomes costly as a standalone product.
The biggest return on investment so far has been visibility, knowing what we have in our environment.
As a small team, Microsoft Defender for Cloud Apps allowed us to manage systems with just one or two people.
We have at least saved the costs we had from the Netskope solution this year.
We saw a return on investment through significant savings in time, money, and resources.
Their customer service is pretty good, but it's frustrating to go through three or four channels before reaching the right person.
The support is excellent, and the speed of response is commendable.
There were instances where the engineers were knowledgeable and helpful, but at other times it felt like a ping pong game, with unnecessary transfers until the right person was found.
The GUI in Qualys Enterprise TruRisk Management is excellent.
We usually get on calls with tech support, and they are very helpful.
False positives are the main issue that we encounter and need to be handled by the support team.
For what I know about the log collector and how much data it can take in, it is super scalable and capable of handling high workloads.
Microsoft Defender for Cloud Apps is very scalable, provided you have the right subscription.
In my experience, Microsoft Defender for Cloud Apps is good enough for small to medium businesses.
It is flexible and scalable, and we can use it and modify it as per our needs.
Scalability depends on the license and the number of assets being monitored.
Scalability is not a challenge.
I would rate it a ten because I have not experienced any stability issues so far with Defender for Cloud Apps.
I would assess the stability and reliability of Microsoft Defender for Cloud Apps as stable
My impression on the stability and reliability of Microsoft Defender for Cloud Apps is that it is very stable.
Qualys VMDR is stable.
This tool has good and excellent performance in the companies that we sell to in the last months for customers, so stability is evident.
I rate the stability of Qualys Enterprise TruRisk Management at eight point five out of ten because I occasionally find bugs that are frustrating, and I have already commented on the support issues.
For data loss prevention, it would be useful to be able to drill down into the kind of data being transferred over CloudApp.
Defender typically connects to Entra ID, but we have local users on the cloud for database access, SSH, or RDS, and there is nothing produced by Defender regarding those local IAM users.
Microsoft Defender for Cloud Apps would benefit if Microsoft allows users to fine-tune false positives, enabling us to dismiss alerts or make adjustments so that such things don't trigger multiple times in the future.
The main issue is the reporting delay, and sometimes the Qualys Enterprise TruRisk Management agent will not scan the system, which means we do not receive accurate reports in a timely manner.
It does not automate patching unless the patch management module is purchased separately.
If AI features were integrated, it could enhance the capabilities significantly.
The pricing for Microsoft Defender for Cloud Apps is acceptable.
My organization is currently revisiting pricing, but previously, the cost was a bit expensive, yet comparable to other solutions with similar functionalities and features.
It's not the cheapest, but also not the most expensive, placing it in the mid-level range.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
Qualys offers better pricing and is feature-packed compared to other tools.
It provides excellent suggestions and options for configuration; for example, it can track suspicious files getting uploaded to cloud resources on Azure based on their signatures, generating alerts for those files.
The product recommends things that need to be blocked and allows for dynamic configuration, which cuts down on potential issues that might arise from going through lists and understanding what needs to be blocked.
The ability to sanction unsanctioned apps using Secure Score benchmarking, included in Cloud, is also beneficial.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud Apps | 5.6% |
| Netskope | 13.4% |
| Prisma Access by Palo Alto Networks | 12.6% |
| Other | 68.4% |
| Product | Mindshare (%) |
|---|---|
| Qualys VMDR | 3.8% |
| Wiz | 4.2% |
| Tenable Nessus | 3.7% |
| Other | 88.3% |


| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 13 |
| Large Enterprise | 19 |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 12 |
| Large Enterprise | 74 |
Microsoft Defender for Cloud Apps is a robust tool for shadow IT detection, cloud integration, and threat detection, enhancing security management with capabilities in auditing and data protection.
Microsoft Defender for Cloud Apps strengthens cloud security by providing comprehensive insights into user activities, seamlessly integrating with Microsoft security products and platforms like SharePoint, Teams, and OneDrive. Its investigative capabilities enhance threat detection, while real-time alerts and policy applications improve security posture. Organizations benefit from its monitoring, auditing, and privileged identity management features that contribute to enhanced security management and data protection.
What are the key features of Microsoft Defender for Cloud Apps?Microsoft Defender for Cloud Apps implementation varies across industries, crucial for sectors needing stringent data protection and compliance, like finance and healthcare. Firms use it to monitor user activity, enforce data loss prevention policies, and ensure security across multi-cloud environments while integrating with Azure services for comprehensive threat management. These implementations are particularly beneficial in improving compliance efforts and protecting sensitive data.
Qualys VMDR is a comprehensive cybersecurity tool offering vulnerability management, patch management, and continuous monitoring with real-time asset discovery. It delivers scalable, cloud-based solutions that enhance security operations without additional infrastructure.
Qualys VMDR provides a robust platform for enterprise security, integrating vulnerability management, compliance, and asset inventory for full visibility across cloud and on-premises environments. It features a comprehensive dashboard with threat intelligence-driven prioritization and remediation capabilities. Users benefit from accurate assessments via agent-based scanning and appreciate the intuitive, customizable scanning and reporting interface. However, there's room for improvement in false positive reduction, UI simplification, and integration capabilities, along with enhancements in asset management for large-scale deployments and the vulnerability database. Enhancing technical support speed, patch management, compliance standards, and inter-module navigation would further enrich user experience.
What are the key features of Qualys VMDR?
What benefits can users expect when evaluating Qualys VMDR?
Qualys VMDR is widely used in industries needing stringent security and compliance measures, offering comprehensive vulnerability and compliance management. It is deployed to secure web applications, servers, and crucial assets, supporting a wide range of sectors by ensuring policy adherence and vulnerability tracking through its powerful cloud platform.
We monitor all Cloud Access Security Brokers (CASB) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.