

Qualys VMDR and Prisma Cloud are prominent competitors in the cybersecurity category. Qualys VMDR shines with robust vulnerability management, while Prisma Cloud leads with comprehensive cloud security, particularly across multi-cloud and hybrid environments.
Features: Qualys VMDR offers detailed vulnerability management with features like robust scanning, continuous monitoring, and policy compliance. It quickly detects and prioritizes vulnerabilities, integrating smoothly to enhance remediation efforts. Prisma Cloud excels in cloud security with configuration monitoring, threat detection, and compliance assurance. Its integration of security into CI/CD pipelines and ability to secure cloud-native apps significantly benefit users.
Room for Improvement: Qualys VMDR users seek an improved UI, enhanced integration, and advanced reporting capabilities. Challenges with asset management and false positives are noted. Prisma Cloud users wish for better interface integration, more granular role-based access control, and improved automation to efficiently handle alerts. Both products exhibit concerns about pricing, indicating a need for more competitive and transparent cost structures.
Ease of Deployment and Customer Service: Qualys VMDR is generally well-deployed in private, on-premises, and hybrid environments, and has dependable technical support, though occasional delays occur. Prisma Cloud is versatile in public cloud and hybrid setups but could improve integration guidance. Its customer service garners positive feedback, though easier interaction and process automation are desired.
Pricing and ROI: Qualys VMDR’s pricing is seen as high, but many customers find it justified by its extensive features and reliability in vulnerability management. ROI is attributed to risk reduction and security process efficiency. Prisma Cloud appears more costly, notably for smaller businesses, but offers extensive features. Configurable licensing provides flexibility but requires strategic cost management. Despite its price, the security improvements in multi-cloud deployments justify the investment.
It eliminates the need for additional hardware, making it a financially and technically sound investment.
Reputation and data security are the two most important things to a financial institution.
We may have prevented a security breach with remediation of the findings.
We saw a return on investment through significant savings in time, money, and resources.
They can respond with technical documentation or pass on the case to the next level because it requires the development of a new feature or changing a feature due to a bug.
Anywhere we raise a tech case, they revert back within an hour.
I would rate them a nine out of ten because whenever there are issues, they are able to resolve them within the timelines and SLAs.
We usually get on calls with tech support, and they are very helpful.
The response time takes a while.
The technical support provided by Qualys is pretty good.
Scalability-wise, I rate the solution a nine out of ten.
We haven't had any issues scaling the solution.
There aren't any limits to Prisma Cloud's scalability.
Scalability depends on the license and the number of assets being monitored.
Qualys VMDR can handle scalability, although increasing the inventory can raise the licensing costs.
Qualys VMDR's scalability is good, and the customer support is good.
I would rate it a ten out of ten for stability.
Most of the time, when the client requires data, it is not available.
The cloud environment is dynamic, so the tool must be dynamic.
Qualys VMDR is stable.
Prisma Cloud is an excellent tool.
We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts.
Even though documentation was available, it took a while for a new person to understand what integration meant, what will be achieved after the integration, or how the integration needed to be done on the Azure or AWS side.
It does not automate patching unless the patch management module is purchased separately.
If AI features were integrated, it could enhance the capabilities significantly.
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually.
The cost was not on the higher side.
If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud.
It is an expensive tool.
I would rate the pricing between seven to eight out of ten.
I have a notion that Qualys might be more expensive than Rapid7.
Qualys offers better pricing and is feature-packed compared to other tools.
It provides a single pane of glass.
If I want to check how many of my S3s have encryption, I can write a Lambda function in Prisma Cloud and get that report.
Overall, the most valuable features for us in Prisma Cloud are those that provide visibility, ensure compliance with regulations, and help us align our on-premises servers and cloud environments with mandated security standards.
The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent.
It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.
Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident.
| Product | Market Share (%) |
|---|---|
| Prisma Cloud by Palo Alto Networks | 9.0% |
| Qualys VMDR | 2.3% |
| Other | 88.7% |

| Company Size | Count |
|---|---|
| Small Business | 36 |
| Midsize Enterprise | 22 |
| Large Enterprise | 56 |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 12 |
| Large Enterprise | 70 |
Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.
Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.
What are the important features of Prisma Cloud?
What benefits or ROI should users consider in reviews?
Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.
Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.
Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.
With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.
We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.