Try our new research platform with insights from 80,000+ expert users

Qualys VMDR vs Zscaler Internet Access comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 6, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (16th), Continuous Threat Exposure Management (CTEM) (1st)
Qualys VMDR
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
95
Ranking in other categories
IT Asset Management (6th), Vulnerability Management (2nd), Configuration Management Databases (2nd), Container Security (9th), Risk-Based Vulnerability Management (1st)
Zscaler Internet Access
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
57
Ranking in other categories
Secure Web Gateways (SWG) (3rd), Internet Security (2nd)
 

Mindshare comparison

Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Qualys VMDR6.9%
Wiz10.8%
Tenable Nessus8.0%
Other74.3%
Vulnerability Management
Secure Web Gateways (SWG) Market Share Distribution
ProductMarket Share (%)
Zscaler Internet Access14.2%
Cisco Umbrella17.1%
Prisma Access by Palo Alto Networks10.9%
Other57.8%
Secure Web Gateways (SWG)
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Ankesh Raj - PeerSpot reviewer
Real-time responses and reporting streamline vulnerability management
Qualys VMDR provides a real-time response and reporting feature, which is excellent. It allows us to see real-time graphs and reports for every asset, server, and more, which is very user-friendly. Our clients have given good feedback, and they are satisfied with the tool. We use it daily to fix vulnerabilities by connecting with infrastructure to remediate. The feedback from the client side is very good.
Mohan Janarthanan - PeerSpot reviewer
User access management and threat prevention are enhanced with user-friendly controls
The best features Zscaler Internet Access offers include application control, tenant segregation, and PoP center regions which have low availability zones. The internet access is very successful and bandwidth speed is excellent. It also has application-based control, URL-based control, and SSL inspection capabilities, which are very useful. Additionally, the in-depth CASB segregation is very beneficial to us. One unique feature I found helpful is the tenant level restrictions, which we use to only access our organization's tenant level mail IDs, drives, and specific tenant level access while restricting public access. Zscaler Internet Access has positively impacted our organization as we have noticed substantial outputs and income. It has improved our security environment control and endpoint protection. It prevents numerous web attacks through its AI/ML incorporated capability which identifies malware, threats, and viruses. It has a toggle button to enable features entirely at the tenant level for all users onboarded into Zscaler Internet Access, resulting in much better outcomes.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We saw benefits from Zafran Security almost immediately after deploying it."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran is an excellent tool."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"The product's patch management is excellent for keeping our critical servers and third-party applications updated efficiently."
"I like the automated report generation and vulnerability report generation."
"The reporting is fine."
"Qualys VM's most valuable feature is automatic detection."
"Great web application security for scanning."
"The most recent is VMDR, which provides a comprehensive overview of how to detect, patch, and remediate specific vulnerabilities."
"The most valuable features are vulnerability scanning, policy compliance scanning, and tablet for web application scanning."
"This solution gives us insight into our environment and improves our security. It helps us to maintain a good patching system whereby we know that XYZ is vulnerable within the system."
"The product's initial setup phase is a bit easy, as one doesn't need high technical expertise."
"Zscaler Web Security protects our users in remote locations from internet threats - even if they are not connected to our network."
"It is easy to set up the solution."
"The solution offers a distributed organization to master and to control all of the endpoints."
"Zscaler Internet Access's best feature is the granular policy controls."
"The data loss prevention feature is the most valuable. It stops our users from inadvertently leaking our customers' data to the Internet or anywhere else it shouldn't go."
"Zscaler Internet Access protects using data loss prevention. If you have a CASB exposing your cloud out into the network, then Zscaler Internet Access will go ahead and control that unknown cloud application in the CASB, protecting it. There is also data detection with exact data match. This improves the data coming into your cloud so you are protecting it."
"Tech support is good."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"The customer support is very bad."
"The tool needs to improve the adding assets and report generation features. I would like to see the policy scan of offline appliances in the product's future releases."
"From the application security perspective, Qualys has a way to go."
"Qualys could be improved in its overall performance compared to other vulnerability management or scanning tools."
"There's a need to upgrade or fix the potential vulnerability rate. Around 20,000 potential vulnerabilities were showing in Qualys VMDR, but none of the other tools showed them. When we checked, it wasn't the case. Support explained that even small issues were being counted as vulnerabilities, causing issues in our audit. So, the security features could be improved to identify vulnerabilities accurately."
"It's too early for me to say if there is any room for improvement since we're in the first couple of months of using this solution."
"Finding things in management can be quite difficult."
"There needs to be better documentation."
"We'd like to have more plugins and integration."
"​When you have appliances, SSL inspection is always a headache due to poor performance and/or lack of ciphers implemented. ​"
"The solution can be improved by advancing some of the newer technologies such as the DLP feature, and adding email security."
"The deployment process of Zscaler Cloud Connector needs to be more user-friendly."
"The reporting functionality could be a bit easier to use. There is a reporting function, but it's quite hard to do any good reporting, from a user-management perspective. For example, if a department manager wants to know how his department is using the web, there is a way to get the data, but it's quite cumbersome to get it and show it well. And that's true for comparing between departments."
"One thing that needs to be improved is their presence in China. I'm not sure if that's a Zscaler thing or if it's a problem with all vendors in this space, but it would be nice to have better coverage in China. This concern is a common one for vendors across the board when dealing with the Chinese market."
"Do not expect to pay for the service and start using it, like Gmail. Zscaler requires a proper implementation to be done to make it successful."
"An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it."
 

Pricing and Cost Advice

Information not available
"Qualys VM is better suited for medium to large companies because the price can be too much for smaller customers."
"When you want to cover yourself for scalability, you will be charged for the number you place on the scan itself."
"An annual license for a single scanner costs around $3,000."
"The license is on a yearly basis."
"It is different for every company, but for us, it's every three years."
"It is more expensive than other products on the market."
"It's very expensive, especially if you want to use multiple modules of Qualys."
"There is a license for the use of this solution. We pay annually instead of monthly to receive a better discount on the price."
"If we need any extra features, the price will increase."
"It is costlier than other solutions."
"The pricing for Zscaler Internet Access could be made cheaper."
"Zscaler is transparent about its pricing model."
"ZIA follows a subscription model pricing and charges you based on the number of users. I would say its price is good."
"The pricing is fair based on its competitive market."
"Because it's a cloud solution, we pay on a yearly basis. It is affordable and includes tech support and all features."
"Zscaler is an expensive solution, but it's worth the price. Their services are unmatched by competitors. Some may come with half the features that Zscaler can offer and be much cheaper. However, they do not have the global coverage that Zscaler has, and they will not provide the same low latencies and the same speeds that Zscaler can."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
867,497 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
8%
Government
6%
Financial Services Firm
16%
Computer Software Company
12%
Manufacturing Company
8%
Government
7%
Computer Software Company
15%
Manufacturing Company
11%
Financial Services Firm
10%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise12
Large Enterprise69
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise8
Large Enterprise39
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What do you like most about Qualys VMDR?
I like that we have many scanners and channels that don't overload. It helps us scan and track easily. Also, the tagg...
What is your experience regarding pricing and costs for Qualys VMDR?
Qualys offers better pricing and is feature-packed compared to other tools.
What needs improvement with Qualys VMDR?
There were some issues later with Qualys VMDR regarding security, specifically with numerous false positive reports.
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...
Which is better, Zscaler internet access or Netsckope CASB?
We researched Netskope but ultimately chose Zscaler. Netskope is a cloud access security broker that helps identify ...
 

Also Known As

No data available
Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security
ZIA
 

Overview

 

Sample Customers

Information Not Available
Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx
Ulster-Greene ARC, BanRegio, HDFC, Ralcorp Holdings Inc., British American Tobacco, Med America Billing Services Inc., Lanco Group, Aquafil, Telefonica, Swisscom, Brigade Group
Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management. Updated: August 2025.
867,497 professionals have used our research since 2012.