Qualys CyberSecurity Asset Management (CSAM) and Qualys Patch Management are strong contenders in the cybersecurity market, providing solutions for asset management and patch deployment respectively. CSAM holds an advantage with its robust asset discovery and tagging features, crucial for maintaining an accurate and unified view of assets.
Features: Qualys CSAM offers dynamic tagging, comprehensive asset inventory, and integration with cloud and on-premises environments. Its capability to track end-of-life software ensures diligent asset management. Qualys Patch Management provides automated patch scheduling, flexibility in configuration, and efficient vulnerability remediation across diverse operating systems.
Room for Improvement: CSAM could improve by enhancing its integration capabilities and providing a more intuitive user interface. Expanding third-party tool compatibility and offering better vulnerability context would be beneficial. Patch Management requires improvements in driver support, user interface intuitiveness, and enhanced integration options. Providing detailed failure insights could further improve its effectiveness.
Ease of Deployment and Customer Service: Qualys CSAM supports hybrid and public cloud environments for seamless deployment, although some users report deployment challenges. Customer service is generally responsive. Similarly, Patch Management excels in cloud deployment, but initial setups could be challenging for beginners. Effective technical support is noted for timely resolutions.
Pricing and ROI: CSAM's rich features come at a higher cost, which might be prohibitive for small organizations, although the ROI is strong due to its effective vulnerability management. Qualys Patch Management, while costly compared to free tools, provides significant value through bundled offerings, with users citing notable efficiency gains and improved vulnerability management as justification for its price.
Improvements to our security infrastructure contributed to overall business growth of approximately 150 percent over the past year.
By automating tasks, it significantly reduces the human resources required, leading to increased efficiency and productivity.
It has reduced the number of development and scripting hours along with maintenance hours.
With Qualys, we can save around 70 percent of time and between 30 to 40 percent of money.
We have a 50 percent return on investment due to reduced operational complexity and increased efficiency in patching and detection.
We have achieved significant time savings of 90 percent, primarily due to comprehensive oversight and visibility of security issues.
The support team was knowledgeable and offered a variety of quick resolution options.
Their SMEs have sufficient knowledge, and if they are not the right contact, they quickly redirect us to someone who can help resolve issues.
I would rate their customer support a ten out of ten.
The support team is experienced and responsive.
The support team is responsive and provides detailed information.
Whenever we raise a request and mention the priority of the ticket, they respond immediately via email or call.
We have about 300,000 assets installed with agents worldwide.
Qualys Cybersecurity Asset Management has proven to be a highly scalable solution for us over the past couple of years.
Qualys CSAM is highly scalable.
It scales efficiently across different machines globally, ensuring patches are deployed smoothly.
Qualys Patch Management is a globally scalable product, easily handling increasing workloads and users.
They introduce new modules as needed, making Patch Management highly scalable.
I would rate the stability of Qualys CSAM a ten out of ten.
They are constantly adding capabilities.
This platform demonstrates excellent stability with consistent 100 percent uptime and no glitches observed.
I would rate the stability of Qualys Patch Management nine point five out of ten.
The stability of Qualys Patch Management is impeccable.
Overall, it is reliable.
Qualys is currently not able to identify assets lacking DNS information.
Features enhancing the interaction with IT or security teams should be added, such as a ticketing feature that, if an issue arises in the CSAM module, enables direct ticket creation in systems like ServiceNow.
We would prefer more options, such as 'approved only for pilot' or 'approved for this line of business,' allowing for better granularity in categorizing software.
There is a limitation where Qualys may not always offer solutions for remediation, particularly for end-of-life or end-of-service applications.
It would be better if Qualys Patch Management identifies whether the process has failed at the first instance and provides a retry button or retry mechanism, allowing retries for failed patches.
Collaborating with various vendors to provide new patches would be beneficial.
A cost-effective solution.
A monthly subscription starting at approximately $72 per month, depending on the specific package and features included.
Though the solution is considered expensive, if bundled with other services such as VMDR or cloud agents, its value would significantly increase.
We get many more features at the same price as other solutions such as Microsoft SCCM.
The pricing is reasonable and less expensive than the previous tool.
We found it costly compared to other vendors.
By correlating this with QDS scores, we can accurately assess the risk level of high or low QDS scores associated with each asset and monitor them accordingly.
The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments.
It also performs scans to identify any vulnerabilities, which helps to take proactive measures before those vulnerabilities are identified by any attacker.
We leverage this functionality to deploy scripts that adjust registry values, effectively patching vulnerabilities and enhancing the security of our machines.
We have been able to apply workarounds for zero-day vulnerabilities efficiently.
It provides insight into the organization's security posture and keeps databases updated with new CVEs.
Qualys CyberSecurity Asset Management provides advanced real-time asset visibility, dynamic tagging, and External Attack Surface Management. It streamlines asset discovery and management using cloud agents and IP-based scanning, enhancing risk management and software lifecycle tracking.
Qualys CyberSecurity Asset Management offers a comprehensive solution for managing asset inventories and tracking software lifecycle states. It facilitates network visibility and supports zero-day vulnerability solutions, enhancing security posture through efficient monitoring. Users benefit from its cloud-based interface, which provides in-depth asset configurations and insights. Key features include automated vulnerability scanning and unauthorized software management, reducing manual efforts. The platform also emphasizes the importance of timely remediation and ongoing risk mitigation across multiple environments. Despite its strengths, users note the need for enhanced integration with additional CMDBs beyond ServiceNow, as well as cost efficiency improvements. Requests also include better report customization, more scan control, and a simplified UI.
What are the key features of Qualys CyberSecurity Asset Management?In industries like finance, healthcare, and manufacturing, Qualys CyberSecurity Asset Management enhances asset control by offering visibility into hardware and software configurations. It aids in maintaining security compliance and identifying unauthorized software, crucial for sectors with strict regulatory requirements.
Qualys Patch Management optimizes patching and vulnerability remediation through automation and intelligence insights, accelerating the process by 43% and improving patch rates by 90%. Its integration with CMDB and ITSM tools speeds up ticket closures by 60%, effectively reducing the attack surface while freeing IT and security resources. This cloud-based solution bridges the IT-security gap, making it essential for cybersecurity.
We monitor all Patch Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.