Try our new research platform with insights from 80,000+ expert users

Qualys VMDR vs ServiceNow CMDB comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys VMDR
Ranking in Configuration Management Databases
3rd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
96
Ranking in other categories
IT Asset Management (3rd), Vulnerability Management (3rd), Container Security (9th), Risk-Based Vulnerability Management (1st)
ServiceNow CMDB
Ranking in Configuration Management Databases
1st
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
33
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Configuration Management Databases category, the mindshare of Qualys VMDR is 5.0%, up from 4.2% compared to the previous year. The mindshare of ServiceNow CMDB is 26.0%, down from 38.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management Databases Mindshare Distribution
ProductMindshare (%)
ServiceNow CMDB26.0%
Qualys VMDR5.0%
Other69.0%
Configuration Management Databases
 

Featured Reviews

Vaibhav Ghule - PeerSpot reviewer
Soc Lead & Edr Administration at Persistent Systems
Continuous risk-based monitoring has strengthened incident response and vulnerability prioritization
I haven't explored Qualys VMDR's vulnerability lifecycle automation yet. One of my analysts mentioned that queries lack grouping operators in Qualys VMDR. From my experience, I would appreciate improvements in the query options in Qualys VMDR, specifically in the query-building process where I would need more features and operators. Additionally, we have been facing issues with Qualys on the cloud level. We cannot download the configuration profile from the cloud agent, and it is showing a pending action for download. During 2025, we noticed outages of Qualys a couple of times. I want to mention that there is an issue with receiving timely RCA deliveries. While this is not necessarily about the tool, it relates to support. The support has not been very responsive, and we are receiving RCAs a little delayed whenever we raise support cases or communicate with the TAMs. Additionally, the UI has a slight latency, which I and my team have experienced. They have also reported this latency issue when navigating through different pages.
reviewer2782440 - PeerSpot reviewer
ServiceNow Consultant at a consultancy with 11-50 employees
Automation features and integrated service mapping have streamlined incident and change management processes
There is probably room for improvement in ServiceNow CMDB. I'm so immersed in projects and solving direct customer issues that I don't think too much about potential improvements. Maintaining an accurate and up-to-date ServiceNow CMDB can be challenging due to incoming data from various sources, but ServiceNow has been developing small AI components to help with data discrepancies and deduplication recently. They have also improved integrations with other tools, providing many out-of-the-box integrations to different monitoring tools and CMDBs, which previously required coding experience for custom integrations. They are moving towards a more low-code or no-code approach, which is part of their goal as a company.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The prioritization feature is great. I think it has all of the advanced features that we need."
"Qualys VMDR provides a real-time response and reporting feature, which is excellent."
"They also have threat detection which maps threats. There is a feed that comes from Qualys when a new vulnerability is found. It tells us which machines are infected with that vulnerability."
"We can now perform vulnerability scans with WAF integration, and the WAF has improved the vulnerability identification and reports to the SOC and CSO."
"Detects new hosts along with vulnerabilities."
"We also like the flexibility in their licensing."
"I find the solution's dashboard interesting...The response time is fine. You can pull up reports without dragging or consuming bandwidth."
"The reporting functionality is great."
"The CMDB for us is fed by our discovery tools, and it lets us be able to track the changes that we make to any incidents or escalation points that we have associated with a CI."
"One of the most valuable aspects of ServiceNow CMDB is its user-friendly interface and high degree of customization at the user level."
"I deal mostly with asset management, and ServiceNow helps me do my job more effectively."
"It has helped in tracking hardware and software and reducing overall costs."
"It integrates with so many different things. ServiceNow CMDB assisted us in streamlining multiple processes."
"The initial setup isn't too complicated."
"The different tables are available in ServiceNow CMDB are quite good. We don't need to create many custom tables."
"It is a dependable source of data. If I want to understand what technologies are used to deliver certain business outcomes, this is what I would use. I can know that this particular server is being used to deliver this business application or business service."
 

Cons

"Qualys doesn't have its own tool to deploy the agents all at once, so we need to use third-party tools such as BigFix or something else to deploy the agents, which is my main concern and should be fixed by the Qualys team."
"Certain integration factors between different options could be improved."
"I would like to see this solution simplified to work more easily in a multi-cloud environment."
"There seems to be a lack of easy onboarding into Qualys."
"The disadvantage of working with Qualys is that the graphical interface is quite outdated."
"I would like to see this solution more developed and competitive in the Cloud space."
"The support has not been very responsive, and we are receiving RCAs a little delayed whenever we raise support cases or communicate with the TAMs."
"There are scenarios where a vulnerability is reported once yet not in subsequent scans, even if we have not fixed it."
"While ServiceNow CMDB is flexible and comprehensive, it's also difficult to implement and requires a lot of customization. In order to fully leverage ServiceNow CMDB, you need ServiceNow Discovery and some other ServiceNow solutions. It's expensive to purchase all of these. We're negotiating with ServiceNow, but we're thinking about replacing it with another CMDB solution."
"There could be room for enhancing customization capabilities."
"Definitely, the price needs to be lower because there are clients that I work with who cannot afford ServiceNow. I have to end up proposing alternate solutions to fit their budget."
"There are some gaps in the technologies that can be solved. Operational technology isn't quite 100% there yet, but I hear it is on the roadmap. I would also like it to be cheaper."
"ServiceNow CMDB could be easier to use. Beginners don't always understand the features. It would be helpful if ServiceNow offered more training or self-guided courses where people could learn to leverage the platform better. I've used ServiceNow for a long time, but I see new users struggling with these processes. There's a steep learning curve."
"I'm still learning about CMDB's capabilities, so I haven't seen anything that I want added yet."
"In general, the pain points are related to ServiceNow. There is a lack of development. ServiceNow is not a true configuration management tool. So, a lot of development is needed to get it to be the kind of tool that you would like it to be. It serves as a platform, and you only get out of it what you invest in terms of development. So, CMDB on its own isn't quite robust until you actually have a CMD project to make it robust. The same thing is there with asset management and all other parts of it. Out of the box, it's not competitive with a like-for-like application."
"Integration is complicated and requires advance scripting and customization to complete it. It would be good to have the ability to customize the UI."
 

Pricing and Cost Advice

"Qualys VM is better suited for medium to large companies because the price can be too much for smaller customers."
"I used to work there, so I never paid for the product. As an employee, we get a lifetime license for personal use, and that's what I'm using. It is a comprehensive platform, so there is a lot more to it. There could be other solutions that are probably a little bit cheaper, but it depends on what people need. Different people have different needs. It offers many things on the same platform. If you add all the things up, it should be cheaper, but I have not done any analysis specifically."
"Qualys Virtual Scanner Appliance isn't expensive right now. But the price for their product bundles could be better."
"There are no additional fees in addition to the standard licensing fees."
"It's very expensive, especially if you want to use multiple modules of Qualys."
"It is more expensive than other products on the market."
"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."
"It is different for every company, but for us, it's every three years."
"The product price falls on the higher side of the spectrum."
"In comparison to the cost of other solutions, you get value for your money with ServiceNow CMDB. It could definitely be cheaper though."
"The market sees ServiceNow as the Ferrari in terms of pricing. It's at the very top, and its cost is very, very high."
"It is really expensive. I don't know actually how much it costs, but in 2016, when a client decided to move from an old solution to ServiceNow and had to choose a supplier for ServiceNow, I had heard that it could cost $10 per hour, which is really expensive. I am not aware of any additional fees to the standard licensing fees. There is no standard ServiceNow solution. When a company wants to acquire ServiceNow, they already know which module they will choose. In a basic package, you would have Service Catalog, Incident Management, and Change Management. These modules are usually required in an IT company."
"The product is pricey."
"It is always fluctuating. It seems to change every six months. Every time they come out with a new iteration, it changes. It is pretty complicated, and they should improve it."
"I would like it to be cheaper. If you've got a large environment, it can get quite expensive quite quickly. You still get a return on investment, but everybody has a tight budget. In terms of licensing, everything is pretty much known upfront. Being SaaS-based, there are no real additional gotchas that we came across."
report
Use our free recommendation engine to learn which Configuration Management Databases solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Manufacturing Company
7%
Government
7%
Computer Software Company
13%
Financial Services Firm
11%
Manufacturing Company
11%
Government
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise12
Large Enterprise70
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise3
Large Enterprise21
 

Questions from the Community

What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...
What is your experience regarding pricing and costs for Qualys VMDR?
My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.
What needs improvement with Qualys VMDR?
I haven't explored Qualys VMDR's vulnerability lifecycle automation yet. One of my analysts mentioned that queries lack grouping operators in Qualys VMDR. From my experience, I would appreciate imp...
What needs improvement with ServiceNow CMDB?
I would like to improve ServiceNow CMDB through better implementation and parameterization. ServiceNow has capabilities, and I wonder if they have included some AI capability to detect data that ar...
What is your primary use case for ServiceNow CMDB?
I mostly deal with ServiceNow CMDB, orchestration, and also project management with ServiceNow. I also provide support for operations in Jira.
What advice do you have for others considering ServiceNow CMDB?
I am a consultant, not a reseller. I used to work for a company, but now I am a consultant. There is project management, ServiceNow CMDB, and orchestration features. Today, we have integrated it wi...
 

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security
No data available
 

Overview

 

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
Wayfair, Siemens, Allianz, Experian, Vitas Healthcare
Find out what your peers are saying about Qualys VMDR vs. ServiceNow CMDB and other solutions. Updated: March 2026.
884,933 professionals have used our research since 2012.