Try our new research platform with insights from 80,000+ expert users

Qualys VMDR vs Zscaler Internet Access comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (3rd)
Qualys VMDR
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
95
Ranking in other categories
IT Asset Management (3rd), Vulnerability Management (3rd), Configuration Management Databases (2nd), Container Security (9th), Risk-Based Vulnerability Management (1st)
Zscaler Internet Access
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
58
Ranking in other categories
Secure Web Gateways (SWG) (3rd), Internet Security (2nd)
 

Mindshare comparison

Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Qualys VMDR5.5%
Wiz8.6%
Tenable Nessus5.9%
Other80.0%
Vulnerability Management
Secure Web Gateways (SWG) Market Share Distribution
ProductMarket Share (%)
Zscaler Internet Access13.5%
Cisco Umbrella15.8%
Prisma Access by Palo Alto Networks9.8%
Other60.9%
Secure Web Gateways (SWG)
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
reviewer2753559 - PeerSpot reviewer
Cyber Security Solution Engineer at a computer software company with 201-500 employees
Reduces vulnerability exposure time and automates workflow for efficient security management
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually. Qualys doesn't have its own tool to deploy the agents all at once, so we need to use third-party tools such as BigFix or something else to deploy the agents, which is my main concern and should be fixed by the Qualys team. That is the main thing I would like to see changed, and apart from that, everything is good.
Mohan Janarthanan - PeerSpot reviewer
Assosiate Vice President at Novac Technology Solutions
User access management and threat prevention are enhanced with user-friendly controls
The best features Zscaler Internet Access offers include application control, tenant segregation, and PoP center regions which have low availability zones. The internet access is very successful and bandwidth speed is excellent. It also has application-based control, URL-based control, and SSL inspection capabilities, which are very useful. Additionally, the in-depth CASB segregation is very beneficial to us. One unique feature I found helpful is the tenant level restrictions, which we use to only access our organization's tenant level mail IDs, drives, and specific tenant level access while restricting public access. Zscaler Internet Access has positively impacted our organization as we have noticed substantial outputs and income. It has improved our security environment control and endpoint protection. It prevents numerous web attacks through its AI/ML incorporated capability which identifies malware, threats, and viruses. It has a toggle button to enable features entirely at the tenant level for all users onboarded into Zscaler Internet Access, resulting in much better outcomes.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran is an excellent tool."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"It gives you a lot of options, and it integrates with our ServiceNow for ticketing and all."
"The initial setup was good. We didn't have any problems with it."
"Qualys VMDR provides us with a quick response to threat findings through regular scheduled scanning, which improves our security operations."
"The Vulnerability Management and Patch Management features are the most valuable features of this solution."
"Qualys VM had a recent upgrade and the newer version is supporting the cloud."
"Provides great functionality."
"Monitors workstations and servers for vulnerabilities and creates reports."
"Detects new hosts along with vulnerabilities."
"The data loss prevention feature is the most valuable. It stops our users from inadvertently leaking our customers' data to the Internet or anywhere else it shouldn't go."
"In terms of management and visibility, there is a single panel where you can configure the policies for your entire organisation worldwide."
"The security is excellent."
"We use ZIA for outbound internet connectivity. The internet traffic of on-prem users will be directed to the ZIA cloud for security checks and web filtering."
"The protection is most valuable."
"The users are at different locations, and Zscaler helps us to put the organization's central security controls on these roaming users."
"The policies are very intuitive and easy to configure, with very little possibility of messing things up."
"The most valuable features of Zscaler Internet Access are it's on the cloud, high network performance, and the interception of users is very easy."
 

Cons

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Could use additional security for the app."
"Sometimes the scanning can get overwhelmed and start to drag when a lot of users are trying to scan at once."
"Qualys VMDR should improve authenticated scanning capabilities."
"The ability to manage user accounts and give rights to the operator to know about abnormalities of applications is something that needs improvement."
"Qualys VMDR identifies vulnerabilities and suggests fixes. However, it does not automate patching unless the patch management module is purchased separately."
"Some of the older features could be polished instead of focusing on releasing new features."
"Qualys doesn't have its own tool to deploy the agents all at once, so we need to use third-party tools such as BigFix or something else to deploy the agents, which is my main concern and should be fixed by the Qualys team."
"The reporting and the GUI need improvements."
"The solution can be improved by advancing some of the newer technologies such as the DLP feature, and adding email security."
"I don't know whether it's Zscaler or not, however, sometimes I can't access my time management. I need to wait and try again a few hours later. Typically, if I let some time pass, I can access it again."
"Zscaler needs to add client-to-client communication. It's always client-to-server communication. The cloud and branch connectors could be improved because we're still dependent on traditional firewalls. They should eliminate this. They should also provide WAN devices should to compete with the SD-WAN solutions also."
"In terms of usage, here in the GCC, it's still growing a growing market, so the combination of DLP, data leak prevention, to a certain extent is fine. But what it requires is user-based access or role-based access. The solution needs to grow into that, which definitely takes time. There's not an easy way to integrate it, when you have a cloud-based solution."
"The tool should improve the predefined dictionaries."
"One thing that needs to be improved is their presence in China. I'm not sure if that's a Zscaler thing or if it's a problem with all vendors in this space, but it would be nice to have better coverage in China. This concern is a common one for vendors across the board when dealing with the Chinese market."
"The solution is expensive. They recently revised the pricing and packaging. Some of our existing customers have been asking for alternate solutions for a lower price."
"Zscaler Internet Access needs to integrate more ISPs. It is good to have more than three ISPs."
 

Pricing and Cost Advice

Information not available
"The tool's pricing is expensive and I would rate the pricing a seven out of ten."
"The pricing and licensing for Qualys could be improved."
"It is different for every company, but for us, it's every three years."
"The pricing is very competitive."
"In Nigerian Naira, we spend about roughly four to five million to use this solution and this is expensive compared to solutions like Nessus."
"The license is on a yearly basis."
"They have recently changed the pricing model, which is now better than it was before."
"Usually every implementation is different and the quote is in function of number of assets."
"The solution is a little bit expensive. On a scale of one to five, I would rate it as a three."
"Roughly, we might spend $70,000 a month on the solution. We don't pay for anything beyond the standard licensing fee."
"If we need any extra features, the price will increase."
"The pricing is fair based on its competitive market."
"The price is competitive. It's not cheap and it's not expensive."
"Licenses are available on a per-host basis. Some features like sandboxing require an additional fee, but most standard features are included in the license."
"The pricing for Zscaler Internet Access could be made cheaper."
"It is costlier than other solutions."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
8%
Manufacturing Company
8%
Outsourcing Company
5%
Financial Services Firm
16%
Computer Software Company
10%
Manufacturing Company
8%
Government
7%
Computer Software Company
14%
Manufacturing Company
11%
Financial Services Firm
10%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise12
Large Enterprise69
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise9
Large Enterprise37
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagg...
What is your experience regarding pricing and costs for Qualys VMDR?
My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.
What needs improvement with Qualys VMDR?
One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we n...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...
What is your experience regarding pricing and costs for Zscaler Internet Access?
It is only for big companies currently and they only focus on that. That is one of the problems to get into the marke...
 

Also Known As

No data available
Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security
ZIA
 

Overview

 

Sample Customers

Information Not Available
Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: November 2025.
879,259 professionals have used our research since 2012.