

Qualys CyberSecurity Asset Management and Qualys Patch Management compete in the cybersecurity solutions market, focusing on asset management and patch management. CSAM holds the upper hand in asset visibility and management, while Patch Management excels in automated patch deployment and precise vulnerability targeting.
Features: Qualys CSAM provides end-of-life software management, dynamic tagging, and integrates with cloud and on-prem environments, ensuring comprehensive endpoint visibility. It excels in asset inventory management and deep asset visibility. Patch Management specializes in detailed patch automation and scheduling, effectively mitigating risks with automated vulnerability assessments and efficient patch deployment.
Room for Improvement: CSAM should offer integration with more cost-effective CMDB solutions beyond ServiceNow and create more pre-built report templates. Improvements in EASM scan frequency and enriched context in vulnerability remediation are necessary. Patch Management needs better driver update support and third-party application coverage. Enhancements in reporting, especially real-time vulnerability responses, are needed for a simpler patching process. Both need better user experience and customization options.
Ease of Deployment and Customer Service: CSAM and Patch Management are deployable across various cloud environments, offering flexibility. CSAM may be complex initially due to its broad capabilities, whereas Patch Management's setup tends to be straightforward. Both offer excellent technical support, though occasional response delays are noted. Customer service is generally highly rated, aiding smooth integration.
Pricing and ROI: CSAM is considered a premium choice but delivers high ROI through automation and thorough management, justifying its cost. Patch Management is more moderately priced, offering considerable functionality at a competitive price. Both platforms provide strong returns, with CSAM focusing on asset management benefits and Patch Management on vulnerability remediation efficiency.
Improvements to our security infrastructure contributed to overall business growth of approximately 150 percent over the past year.
By automating tasks, it significantly reduces the human resources required, leading to increased efficiency and productivity.
It has reduced the number of development and scripting hours along with maintenance hours.
With Qualys, we can save around 70 percent of time and between 30 to 40 percent of money.
We have a 50 percent return on investment due to reduced operational complexity and increased efficiency in patching and detection.
This single source of truth has helped reduce costs for our organization by over seventy percent in return on investment.
The support team was knowledgeable and offered a variety of quick resolution options.
Their SMEs have sufficient knowledge, and if they are not the right contact, they quickly redirect us to someone who can help resolve issues.
I would rate their customer support a ten out of ten.
The support team is experienced and responsive.
The support team is responsive and provides detailed information.
Whenever we raise a request and mention the priority of the ticket, they respond immediately via email or call.
We have about 300,000 assets installed with agents worldwide.
The scalability is excellent as we manage more than one hundred thousand assets, including over one hundred thousand endpoints, approximately 2,600 servers, and more than 1,200 network devices.
Qualys Cybersecurity Asset Management has proven to be a highly scalable solution for us over the past couple of years.
It scales efficiently across different machines globally, ensuring patches are deployed smoothly.
Qualys Patch Management is a globally scalable product, easily handling increasing workloads and users.
If a client has purchased licensing for ten thousand assets and exceeds that, Qualys continues to scan those additional assets, which ensures the client's coverage.
I would rate the stability of Qualys CSAM a ten out of ten.
The product stability has notably declined over the last two months, and the performance to fulfill a page request is very slow compared to its previous performance.
They are constantly adding capabilities.
I would rate the stability of Qualys Patch Management nine point five out of ten.
The stability of Qualys Patch Management is impeccable.
Overall, it is reliable.
Qualys is currently not able to identify assets lacking DNS information.
Features enhancing the interaction with IT or security teams should be added, such as a ticketing feature that, if an issue arises in the CSAM module, enables direct ticket creation in systems like ServiceNow.
If there's one key aspect to focus on, it's discovery—the ability to identify assets that you are not aware of, even when you can see they are present.
There is a limitation where Qualys may not always offer solutions for remediation, particularly for end-of-life or end-of-service applications.
It would be better if Qualys Patch Management identifies whether the process has failed at the first instance and provides a retry button or retry mechanism, allowing retries for failed patches.
For critical options, they could make them red, green for medium, and blue for less significant options.
A cost-effective solution.
I believe that the stability and reliability of Qualys offer great value for the money.
A monthly subscription starting at approximately $72 per month, depending on the specific package and features included.
We get many more features at the same price as other solutions such as Microsoft SCCM.
However, it can be a bit expensive sometimes, and I think clients can be shocked when they see the price.
The pricing is reasonable and less expensive than the previous tool.
By correlating this with QDS scores, we can accurately assess the risk level of high or low QDS scores associated with each asset and monitor them accordingly.
The most valuable feature is the real-time visibility Qualys CyberSecurity Asset Management provides into all assets across our development and operational environments.
It also performs scans to identify any vulnerabilities, which helps to take proactive measures before those vulnerabilities are identified by any attacker.
We leverage this functionality to deploy scripts that adjust registry values, effectively patching vulnerabilities and enhancing the security of our machines.
We have been able to apply workarounds for zero-day vulnerabilities efficiently.
It provides insight into the organization's security posture and keeps databases updated with new CVEs.
| Product | Mindshare (%) |
|---|---|
| Qualys Patch Management | 3.3% |
| Qualys CyberSecurity Asset Management | 2.0% |
| Other | 94.7% |

| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 2 |
| Large Enterprise | 23 |
| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 8 |
| Large Enterprise | 25 |
Qualys CyberSecurity Asset Management provides key features including asset inventory management, end-of-life tracking, dynamic tagging, and integration with CMDB, offering extensive visibility and support for proactive threat response.
Qualys offers comprehensive visibility across hardware and software assets, aiding in tracking unauthorized applications and facilitating automated vulnerability remediation. Its user-friendly interface and dynamic risk scoring enhance security posture management. Users leverage it for vulnerability management and compliance, benefiting from real-time risk identification and efficient operations in cloud and on-premises environments.
What are the key features of Qualys CyberSecurity Asset Management?Cybersecurity teams in various industries, such as financial services, healthcare, and manufacturing, utilize Qualys to manage technical debt through end-of-life tracking and facilitate robust patch management. It supports compliance and visibility initiatives, essential for maintaining data integrity and operational security in dynamic environments.
Qualys Patch Management optimizes patching and vulnerability remediation through automation and intelligence insights, accelerating the process by 43% and improving patch rates by 90%. Its integration with CMDB and ITSM tools speeds up ticket closures by 60%, effectively reducing the attack surface while freeing IT and security resources. This cloud-based solution bridges the IT-security gap, making it essential for cybersecurity.
We monitor all Patch Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.