No more typing reviews! Try our Samantha, our new voice AI agent.

Qualys VMDR vs ServiceNow Security Operations comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys VMDR
Ranking in Risk-Based Vulnerability Management
1st
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
96
Ranking in other categories
IT Asset Management (3rd), Vulnerability Management (3rd), Configuration Management Databases (3rd), Container Security (9th)
ServiceNow Security Operations
Ranking in Risk-Based Vulnerability Management
11th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
23
Ranking in other categories
Security Incident Response (1st), Security Orchestration Automation and Response (SOAR) (9th)
 

Mindshare comparison

As of March 2026, in the Risk-Based Vulnerability Management category, the mindshare of Qualys VMDR is 12.1%, down from 17.1% compared to the previous year. The mindshare of ServiceNow Security Operations is 1.7%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Risk-Based Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys VMDR12.1%
ServiceNow Security Operations1.7%
Other86.2%
Risk-Based Vulnerability Management
 

Featured Reviews

Vaibhav Ghule - PeerSpot reviewer
Soc Lead & Edr Administration at Persistent Systems
Continuous risk-based monitoring has strengthened incident response and vulnerability prioritization
I haven't explored Qualys VMDR's vulnerability lifecycle automation yet. One of my analysts mentioned that queries lack grouping operators in Qualys VMDR. From my experience, I would appreciate improvements in the query options in Qualys VMDR, specifically in the query-building process where I would need more features and operators. Additionally, we have been facing issues with Qualys on the cloud level. We cannot download the configuration profile from the cloud agent, and it is showing a pending action for download. During 2025, we noticed outages of Qualys a couple of times. I want to mention that there is an issue with receiving timely RCA deliveries. While this is not necessarily about the tool, it relates to support. The support has not been very responsive, and we are receiving RCAs a little delayed whenever we raise support cases or communicate with the TAMs. Additionally, the UI has a slight latency, which I and my team have experienced. They have also reported this latency issue when navigating through different pages.
SH
Freelancer at a media company with 1,001-5,000 employees
Gaining unified control over vulnerabilities has improved governance but pricing and support need work
The market price is slightly high. The pricing should be a little lower because this is a SaaS-based product. Everyone using ServiceNow might be getting many modules, but the overall module cost becomes high with license consumption one by one. I personally see that if ServiceNow is to grow over the next decade, they need to work on the pricing part. Cheap providers are emerging, and in the age of AI, it is evident that the chatbot and the virtual agent features, which are prominent features of ServiceNow, could be completely compromised and replaced by people choosing other tools. If ServiceNow develops a strategy to lower the price and increase the customer base, it could help ServiceNow to grow for another decade. I encountered one issue in ServiceNow Security Operations. The different tools, for example, Tenable and TVM, discovered vulnerabilities that had very limited information when imported. However, the same vulnerabilities from different sources, the TVM and Tenable, had shorter descriptions than what was present in the common vulnerabilities or CVE. If this depends on the implementer, such as Tenable or how other security operations implement them, the text was very limited. Customers were asking questions about why this was happening and if ServiceNow was working properly. The vulnerability information should be updated and the common text should be displayed every time, regardless of how many different tools are used for integration. The vulnerability database should be consistent when it comes to the description to avoid confusion for customers implementing it for the first time. This is an improvement that ServiceNow can make.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are vulnerability detection and the scanning capability to enable identification of vulnerabilities across our network."
"The most valuable features are that it is a simple solution that makes scanning easy."
"The most valuable feature is the ability to run different capabilities with the same agent. With only one agent, we can have EDR, vulnerability management, compliance and some basic SaaS security capabilities."
"Qualys VM is very stable."
"In a world of the hybrid workforce and work from home, if you're looking for a more effective vulnerability management tool, you have to go to the agent-based vulnerability management tools that are out there, and we've been extremely happy with Qualys."
"It's also highly customizable, allowing us to tailor it to our needs."
"Qualys VM had a recent upgrade and the newer version is supporting the cloud."
"The prioritization feature is great. I think it has all of the advanced features that we need."
"My favorite feature is the application vulnerability scanner."
"This product is a good value for the money."
"The ease of use is great."
"The solution is stable."
"It's stable."
"We refer to the setup and installation guide provided by ServiceNow. They have good documentation, which makes it easier to handle the process."
"ServiceNow Security Operations provides significant control over vulnerabilities, allowing users to mark false alarms as false positives and ignore them, which is important because many vulnerabilities are not real but appear as such."
"When things are set up correctly it goes really smooth, however, it's getting there that takes time."
 

Cons

"The reporting section needs improvement as running reports can take several hours."
"Qualys VM could improve by having more skilled support personnel."
"In terms of improvement for the web application console, in the older version, things were more segregated and presented in a brief format."
"The response time of technical support takes a while."
"Make some minimal dashboard improvements."
"Its integration with ServiceNow and other similar products is complicated and can be improved."
"The only improvement I can think of is on the implementation side. At times it is a bit slow."
"Could use additional security for the app."
"They should stick to the roadmap and continue to build plugins and integrations with other third parties, enhance the UI, and enhance the reporting. It's all good. They should just continue enhancing the releases."
"It doesn't interact with things very well."
"They should stick to the roadmap and continue to build plugins and integrations with other third parties, enhance the UI, and enhance the reporting."
"The initial setup is difficult."
"The product is called SecOps, but it is not security operations in terms of SIEM solutions."
"It is challenging for the customers to understand the processes for SecOps. It needs to be simplified."
"Customer awareness and understanding of ServiceNow's SecOps capabilities could be improved."
"It would be ideal if there were already integrations available in ServiceNow with third-party tools."
 

Pricing and Cost Advice

"Qualys Virtual Scanner Appliance isn't expensive right now. But the price for their product bundles could be better."
"The pricing is very competitive."
"An annual license for a single scanner costs around $3,000."
"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."
"The license is on a yearly basis."
"The solution is expensive."
"Qualys is cheaper and more affordable than other solutions."
"It is more expensive than other products on the market."
"This product is a good value for the money."
"The solution is more expensive than BMC Remedy, the other ITSM tool available in the market."
"If you're going to implement it on your own, there would be internal costs. If you're going to implement it through a contractor or consultant, you have to pay for that."
"Compared to competitor tools, ServiceNow Security Operations is more affordable"
"It is an expensive product."
"The product is more expensive than other solutions."
report
Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Manufacturing Company
7%
Government
6%
Financial Services Firm
15%
Manufacturing Company
14%
Government
7%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise12
Large Enterprise70
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
Large Enterprise16
 

Questions from the Community

What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagging system is good for tagging. We can still use QualysAgent task ID tools even ...
What is your experience regarding pricing and costs for Qualys VMDR?
My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.
What needs improvement with Qualys VMDR?
I haven't explored Qualys VMDR's vulnerability lifecycle automation yet. One of my analysts mentioned that queries lack grouping operators in Qualys VMDR. From my experience, I would appreciate imp...
What needs improvement with ServiceNow Security Operations?
ServiceNow Security Operations is not specifically a vulnerability management or incident tool, but rather a data aggregator. It would be beneficial if, similar to the Discovery module which assess...
What advice do you have for others considering ServiceNow Security Operations?
Initially, acquire basic knowledge about the system and understand how ServiceNow Security Operations operates with other tools. This understanding is essential before starting the implementation p...
 

Also Known As

Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security
No data available
 

Overview

 

Sample Customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
DXC Technology, Freedom Security Alliance, Prime Therapeutics, Seton Hall University, York Risk Services
Find out what your peers are saying about Qualys VMDR vs. ServiceNow Security Operations and other solutions. Updated: February 2026.
885,311 professionals have used our research since 2012.