Qualys Web Application Scanning vs ReversingLabs comparison

Qualys Web Application Scan...

Read 4 ReversingLabs reviews

2,019 Views
444 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Qualys Web Application Scanning and ReversingLabs are leading cybersecurity solutions. ReversingLabs often appears more robust due to its advanced capabilities and comprehensive security analytics.

Features: Qualys Web Application Scanning offers efficient vulnerability detection, integration capabilities, and comprehensive threat coverage for web applications. ReversingLabs provides advanced malware analysis, threat intelligence, and accurate data insights.

Room for Improvement: Qualys Web Application Scanning could enhance its user interface, simplify functionalities, and improve reporting features. ReversingLabs could focus on better integration with third-party tools, streamline updates, and enhance update processes.

Ease of Deployment and Customer Service: Qualys Web Application Scanning benefits from a smooth deployment and responsive support, despite some initial setup challenges. ReversingLabs offers straightforward deployment and efficient customer service, often considered slightly superior.

Pricing and ROI: Qualys Web Application Scanning has competitive pricing with a good return on investment, balancing cost and features well. ReversingLabs, although pricier, justifies this with substantial ROI due to effective threat management.

To learn more, read our detailed Qualys Web Application Scanning vs. ReversingLabs Report (Updated: December 2025).

Qualys Web Application Scanning vs. ReversingLabs

Download the complete report

Helped 879,768 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys Web Application Scan...

Ranking in Application Security Tools

16th

Average Rating

7.6

Reviews Sentiment

6.3

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (13th)

ReversingLabs

Ranking in Application Security Tools

42nd

Average Rating

9.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Anti-Malware Tools (46th), Container Security (48th), Software Composition Analysis (SCA) (25th), Threat Intelligence Platforms (TIP) (30th), Software Supply Chain Security (19th)

Mindshare comparison

As of January 2026, in the Application Security Tools category, the mindshare of Qualys Web Application Scanning is 1.8%, down from 1.9% compared to the previous year. The mindshare of ReversingLabs is 0.5%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools Market Share Distribution
Product	Market Share (%)
Qualys Web Application Scanning	1.8%
ReversingLabs	0.5%
Other	97.7%

Application Security Tools

Featured Reviews

AnkitSharma13

Security Officer at a tech vendor with 10,001+ employees

Web scanning needs improvement but offers good vulnerability detection

The downside of Qualys Web Application Scanning is that it cannot crawl automatically. If I provide an IP address and a login form, it does basic testing, but it doesn't go deep as IBM AppScan does. If Qualys Web Application Scanning could improve its crawling capability, it would be more user-friendly. Qualys Web Application Scanning does IP-level testing, requiring direct input of credentials, and can only scan a few pages to provide known generic vulnerabilities, which isn't as beneficial from my point of view. The Vulnerability Management also relies heavily on version numbers and will flag vulnerabilities based on the component version, but it doesn't check if a real fix exists, leading to flags on components that actually have workarounds available.

Read full review

Tim Craig

Forensic Lead, Global Security Fusion Center at a insurance company with 10,001+ employees

Very good malware and goodware repository and enables us to look more deeply at indicators of compromise

The automated static analysis of malware is the most valuable feature. Its detection abilities are very good. It hits all of the different platforms out there, platforms that see the items in the wild. Also, the solution’s object and file analysis provide us with actionable insights. Its malware and goodware repository is very good. It's very robust. It gets all of the different repositories that are out there that do analysis and brings them under one roof where we can statically analyze for those indicators of compromise and look at them more deeply. If we need to go deeper into things, we can do that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The feature that I have found most valuable is the progressive scan. It is good. It's done in 24 hours."

"Qualys Web Application Scanning is robust and mature from industry standards."

"It works with many different products."

"The vulnerability management feature is a strong one. And also the patch management feature."

"You can integrate your Burp Suite results and create an integrated report. Also, the way it shows the results - threats and exploit details - makes remediation very easy."

"The tool links vulnerabilities with DDIs and gives a complete overview of the application. The continuous monitoring capability is good."

"By using QualysGuard, we are able to finish external scans with assured results in half the time."

"The most valuable feature is that we are able to scan the services and put credentials like a user ID password. We can verify the vulnerability level."

More Qualys Web Application Scanning pros

"ReversingLabs has a large sample size."

"As far as static analysis information is concerned, we use most of the information that is available in order to determine whether or not we might be dealing with a malware variant. This includes information that is related to Java rules. This is also related to malware families indicated or specific malicious software variants that are labeled by name."

"As far as the malware repository is concerned, it's extensive. It's a good source for finding samples, where we are unable to find them on other channels or by leveraging other sources."

"It offers reports on a great many more file types than the other analysis solutions we have. It can give us a more in-depth analysis and better reporting on a larger number of file types. It also gives us a more comprehensive score on a number of things as well, and that's why we're using it as a front-end filter. It gives us more information... It's valuable because of its depth of information, as well as the breadth it gives us. There aren't a lot of tools that cover all of the different file types."

"The automated static analysis of malware is the most valuable feature. Its detection abilities are very good. It hits all of the different platforms out there, platforms that see the items in the wild."

Cons

"There's a distinction between internal and external scanning processes that could be streamlined. Currently, for internal scanning, specific configurations and scanner appliances need to be deployed within the network, which differs from the simpler setup for external scans. This dual process complicates the setup for comprehensive scanning coverage."

"Qualys Web Application Scanning is very complex to use, and its graphical interface is not very user-friendly."

"The UI is not user-friendly and you don't have a yearly reporting facility where you can slice and dice in different jobs."

"It should have better automatic reporting."

"The solution needs to adjust its pricing. They should make it more affordable."

"It is unclear how to build automation on Qualys. We do some automation, but not fully, because working is difficult."

"I would like it to be cheaper because it is a bit expensive compared to competitors like Tenable Nessus."

"The downside of Qualys Web Application Scanning is that it cannot crawl automatically. If I provide an IP address and a login form, it does basic testing, but it doesn't go deep as IBM AppScan does."

More Qualys Web Application Scanning cons

"We would really like further integration with our threat intelligence platform, which is called ThreatConnect. We would also really like further integrations with an endpoint protection product we use called Tanium. The reason I mentioned both of these is that ReversingLabs claims to have extensive integrations with both of them, but they did not work for us."

"While the company is very helpful, it would be very much appreciated to have extensive proof of concept scripts for the different APIs available, though not for all the APIs that we have purchased. Respective scripts are available, but those scripts which are available are typically not of very high quality."

"The product support could be better at times. Sometimes, the resources that they provide could be of higher quality."

"The solution needs to improve integrations."

"I would like to see if we could do a little bit more of bulk uploading of hash sets. Right now, I can only do them individually."

Pricing and Cost Advice

"We normally purchase an annual license."

"Qualys has an IT-based licensing based on a yearly license, which is a good way of handling it. However, in some cases, when we do the PCI scanning, the host will not like the scanning and we lose the IT license. So, this could be improved."

"It is best to be an institutional buyer and directly contact the sales team, as they can provide over-the-top discounts for bulk orders."

"The product pricing is fair and reasonably priced."

"The product is expensive, at least initially, in comparison to other products in this category."

"The cost is $30,000 USD for one year to cover WAS (Web Application Security) and the VM (Virtual Machine) security in a company with 200 employees."

"Licensing was based on the number of assets that you want to scan on your network. You can also do licensing on subscription. On subscription, it is easier and more flexible. You tell Qualys that you want to move from the 1000 to 2000 band or the 3000 or 5000 band, then they will give you the quotation for it. Once you pay for it, applying the licensing is quite easy and effective."

"We are on an annual license for the solution and the pricing could be more affordable."

More Qualys Web Application Scanning pricing and cost advice

"Currently, the license number of lookups that we purchased has not been reached yet, because the integration has only recently been completed. However, our usage is expected and planned to increase over the next couple of months."

"We have a yearly contract based on the number of queries and malicious programs which can be processed."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

879,768 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

13%

Computer Software Company

12%

Government

Financial Services Firm

14%

Computer Software Company

13%

Insurance Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	6
Large Enterprise	27

No data available

Questions from the Community

What do you like most about Qualys Web Application Scanning?

The vulnerability management feature is a strong one. And also the patch management feature.

See all answers

What is your experience regarding pricing and costs for Qualys Web Application Scanning?

Regarding pricing, I think for personal use, it is costly, but if organizations are ready to pay, then it is fine as they are using it.

See all answers

What needs improvement with Qualys Web Application Scanning?

See all answers

Ask a question

Earn 20 points

Comparisons

OWASP Zap vs Qualys Web Application Scanning

Compared 11% of the time

SonarQube vs Qualys Web Application Scanning

Compared 9% of the time

Veracode vs Qualys Web Application Scanning

Compared 7% of the time

Acunetix vs Qualys Web Application Scanning

Compared 6% of the time

PortSwigger Burp Suite Professional vs Qualys Web Application Scanning

Compared 6% of the time

More Qualys Web Application Scanning Competitors

VirusTotal vs ReversingLabs

Compared 16% of the time

JFrog Xray vs ReversingLabs

Compared 11% of the time

MetaDefender vs ReversingLabs

Compared 8% of the time

OPSWAT Filescan Sandbox vs ReversingLabs

Compared 8% of the time

Black Duck SCA vs ReversingLabs

Compared 7% of the time

More ReversingLabs Competitors

Product Reports

Qualys Web Application Scanning

Download Qualys Web Application Scanning product report

Download ReversingLabs product report

Also Known As

Qualys WAS

ReversingLabs Titanium, ReversingLabs secure.software

Overview

Qualys Web Application Scanning (WAS) is a fully cloud-based web application security scanner. The scanner will automatically crawl periodically and test web applications to discover potential vulnerabilities, including cross-site scripting (XSS) and SQL injection. The consistent testing equips the automated service to generate consistent results, lessen false positives, and offer the ability to scale to protect thousands of websites effortlessly.

Qualys Web Application Scanning is bundled with different scanning technology to carefully scan websites for malware infections and will send notifications to website owners to assist in preventing blacklisting and brand reputation damage. As digital transformation takes place in various organizations, Qualys WAS gives organizations the ability to track and document their web app security status through its interactive reporting capabilities.

Qualys WAS empowers organizations to remediate any web application vulnerabilities quickly. Some of the key tools offered are:

Deep Scanning: All apps and APIs on your internal network and public cloud are covered by Qualys WAS deep scanning to show you any visible vulnerabilities.
DevSec Ops Tool: Detect security issues in your code while still in app development stages and generate comprehensive reports.
Comprehensive Discovery: Discover and catalog new and unknown web apps in your network.
Malware Detection: Scan a website, identify vulnerabilities, and receive alerts to any infections.

Benefits of Qualys Web Application Scanning

Qualys Web Application Scanning offers many benefits, including:

Quick Deployment: Requires no infrastructure or software to upkeep.
Effortless Scalability: Effortlessly launch a deep scan and protect thousands of websites.
Centralized Management: Manage and mend all web app vulnerabilities through a single interface.
Excellent Integration Capabilities: Integrates with Qualys Web App Firewall (WAF) for a single-click virtual patching of found vulnerabilities.
Respond to Threats Immediately: Qualys Continuous Monitoring offers the user a hands-free service by automatically launching scanning and sending notifications of a potential threat.
Cost-effective Solution: Data is analyzed in real time as Qualys WAS is an end-to-end solution; this helps avoid costs associated with managing multiple security vendors.

Reviews from Real Users

Qualys Web Application Scanning stands out among its competitors for a variety of reasons. Two of those reasons are its progressive scan and quick detection of vulnerabilities.

P.K., a senior software developer at a tech vendor, writes, "The feature that I have found most valuable is the progressive scan. It is good. It's done in 24 hours."

Nagaraj S., lead cybersecurity engineer at a tech service company, notes, "I have found the detection of vulnerabilities tool thorough with good results and the graphical display output to be wonderful and full of colors. It allows many types of outputs, such as bar and chart previews."

Qualys

ReversingLabs is the trusted authority in software and file security. We provide the modern cybersecurity platform to verify and deliver safe binaries. Trusted by the Fortune 500 and leading cybersecurity vendors, the ReversingLabs Titanium Platform® powers the software supply chain and file security insights, tracking over 35 billion files daily with the ability to deconstruct full software binaries in seconds to minutes. Only ReversingLabs provides that final exam to determine whether a single file or full software binary presents a risk to your organization and your customers.

RL - Trust Delivered.

https://www.reversinglabs.com

Sample Customers

BskyB, Cartagena, ClearPoint Learning Systems, Connect Group, du, Fortrex Technologies, HBOR, HDI, Highlights for Children, The Lithuanian State Enterprise Centre of Registers, City of Miami Beach, Microsoft, MidlandHR, MSCI Inc., Northern Arizona University, Ofgem, Olympus Europa, PhoneFactor, RTL Nederland, ThousandEyes, VGZ Organisatie B.V.

Financial services, healthcare, government, manufacturing, oil & gas, telecommunications, information technology

Qualys Web Application Scanning vs. ReversingLabs