Try our new research platform with insights from 80,000+ expert users

Qualys Patch Management pros and cons

Vendor: Qualys

4.5 out of 5

38 reviews
97% willing to recommend

Pros & Cons summary

Qualys Patch Management automates patch deployment, reducing dependence on IT teams and integrating vulnerability management for improved risk mitigation. It offers scheduling and on-demand patching but lacks support for Mac and a comprehensive patch list. Reporting aids vulnerability understanding, yet download speeds need enhancement. Pricing is high, and stability issues such as crashes persist, which can challenge affordability and software reliability. Patch updates require quicker knowledge base integration.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Qualys Patch Management automates patch deployment for numerous assets, significantly reducing manual IT tasks.

Qualys Patch Management excels in patch rate improvement, with some organizations reporting up to a 98% rate.

Qualys Patch Management offers integration with VMware for rapid vulnerability patching.

Qualys Patch Management's automated features streamline deployment and ensure compliance, bolstering organizational security.

Qualys Patch Management provides comprehensive reporting that aids in timely vulnerability assessment and response.

CONS

Downloading extensive vulnerability reports is time-consuming, and Qualys Patch Management's download speeds could be improved by allowing faster downloads and offering reports in Excel format.

Patch support for Mac is missing, limiting the scope of Qualys Patch Management's application.

Patches often require OEM consent, and Qualys Patch Management cannot automate updates for outdated tools flagged as vulnerabilities.

Stability and reliability issues are reported, with modules sometimes being offline or the application crashing, necessitating improvement.

False positives in vulnerability detection and delays in zero-day solutions release highlight areas for enhanced detection logic and quicker response times.

Qualys Patch Management Pros review quotes

reviewer2590236

Information Security Lead at Infosys

Oct 31, 2024

Qualys Patch Management offers a valuable feature that allows for deferred reboots, giving users control while still ensuring eventual patching.

Read full review

ShantanuChoubal

Project Lead at Persistent Systems

Dec 11, 2024

The most valuable features of Qualys Patch Management include its ability to automate patch deployment for hundreds or thousands of assets, reducing our reliance on the IT team to perform these tasks manually.

Read full review

RO

Cybersecurity Engineer at a manufacturing company with 51-200 employees

Oct 18, 2024

Patch Management, if configured correctly, works effectively without requiring further action.

Read full review

Qualys Patch Management

Free Report: Qualys Patch Management Reviews and More

Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.

872,706 professionals have used our research since 2012.

AN

Cyber Security Specialist at UBS Financial

May 19, 2025

Overall, I would rate Qualys Patch Management a ten out of ten for everything.

Read full review

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

Jun 10, 2024

The most valuable feature in Patch Management is the Qualys query language for set-it-and-forget-it patching for our preapproved patches, and our preapproved schedules, That is extremely helpful compared to the old days of patching.

Read full review

Senior Security Consultant at CyberNxt Solutions LLP

Nov 5, 2024

The features I find most valuable in Qualys Patch Management include the ability to manage registry changes and run scripts both pre and post-patching. We have been able to apply workarounds for zero-day vulnerabilities efficiently.

Read full review

Yuvaraaj Adhithya

Cyber Security Analyst at WPP

Aug 20, 2024

For a few applications, you do not need to go and download the patches from the network or somewhere else. They have the patches or the latest updates in the directory. You can just select a patch and deploy it to a server. You can create a patch job and select the patch. Everything is within the interface. You do not need to go out of it.

Read full review

reviewer2589096

Senior Information Security Engineer at Infosys

Oct 30, 2024

Qualys Patch Management has significantly reduced our organizational risks.

Read full review

Revathi VeeraRaghavan

Information Security - Manager at Infosys

Dec 5, 2024

Qualys Patch Management offers numerous valuable features, including automatic patching for Google browsers, which allows for scheduled updates immediately upon vendor release.

Read full review

Windows Security Patching Operation III (Cyber Operations) at CBTS

Sep 26, 2025

Qualys Patch Management provides a single source of truth for assessing, prioritizing, and remediating assets and vulnerabilities, with everything integrated in one dashboard, allowing us to easily manage our tasks and reduce costs.

Read full review

Show 10 more reviews (out of 38)

Qualys Patch Management Cons review quotes

reviewer2590236

Information Security Lead at Infosys

Oct 31, 2024

Currently, there are limitations in downloading patch jobs to view all associated assets and patch statuses.

Read full review

ShantanuChoubal

Project Lead at Persistent Systems

Dec 11, 2024

It works with Windows and Linux, but Mac patch support is not yet available.

Read full review

RO

Cybersecurity Engineer at a manufacturing company with 51-200 employees

Oct 18, 2024

Qualys can do regular check-ins to go over not only all the vulnerabilities but also the overall process to see if there is anything where we might need improvement.

Read full review

Qualys Patch Management

Free Report: Qualys Patch Management Reviews and More

Learn what your peers think about Qualys Patch Management. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.

872,706 professionals have used our research since 2012.

AN

Cyber Security Specialist at UBS Financial

May 19, 2025

Initially, I was confused about where to find and how to use the available features. It was challenging to identify the options we could employ and why we were using them.

Read full review

Employee-Owner, Senior Consultant, Information Security at Keller Schroeder

Jun 10, 2024

A common area for improvement in Patch Management, both within our environment and others I've encountered, is the lack of built-in driver updates.

Read full review

Senior Security Consultant at CyberNxt Solutions LLP

Nov 5, 2024

They need to improve the user-friendliness of identifying how many devices are affected by a particular patch. It is not intuitive, and there should be clearer indicators or buttons to access this information easily.

Read full review

Yuvaraaj Adhithya

Cyber Security Analyst at WPP

Aug 20, 2024

One of the challenges that we have faced with the Patch Management tool is that you cannot patch all the things. There are some limitations, whereas, in SCCM, we can create a package and just deploy that through it. Anything is deployable through SCCM, whereas Patch Management is very selective.

Read full review

reviewer2589096

Senior Information Security Engineer at Infosys

Oct 30, 2024

Qualys could improve its randomized download feature and provide more detailed information about patch failures, including the reason for failure.

Read full review

Revathi VeeraRaghavan

Information Security - Manager at Infosys

Dec 5, 2024

Reporting needs enhancement, particularly with group-based compliance percentages and clearer, VMDR-like reporting in the Patch Management module.

Read full review

Windows Security Patching Operation III (Cyber Operations) at CBTS

Sep 26, 2025

While I've recently seen many problems with stability and reliability in Qualys, it was initially stable; however, current issues include modules being offline for extended periods.

Read full review

Show 10 more reviews (out of 38)

Product Categories

Product Categories

Patch Management

Popular Comparisons

Popular Comparisons

Microsoft Configuration Manager vs Qualys Patch Management

BigFix vs Qualys Patch Management

NinjaOne vs Qualys Patch Management

Kaseya VSA vs Qualys Patch Management

ManageEngine Patch Manager Plus vs Qualys Patch Management

Automox vs Qualys Patch Management

Microsoft Windows Server Update Services vs Qualys Patch Management

Vicarius vRx vs Qualys Patch Management

Ivanti Security Controls vs Qualys Patch Management

Patch My PC vs Qualys Patch Management

PDQ Deploy vs Qualys Patch Management

See all alternatives

Product Categories

Product Categories

Patch Management

Popular Comparisons

Popular Comparisons

Microsoft Configuration Manager vs Qualys Patch Management

BigFix vs Qualys Patch Management

NinjaOne vs Qualys Patch Management

Kaseya VSA vs Qualys Patch Management

ManageEngine Patch Manager Plus vs Qualys Patch Management

Automox vs Qualys Patch Management

Microsoft Windows Server Update Services vs Qualys Patch Management

Vicarius vRx vs Qualys Patch Management

Ivanti Security Controls vs Qualys Patch Management

Patch My PC vs Qualys Patch Management

PDQ Deploy vs Qualys Patch Management

See all alternatives

Related questions

26

Why is patch management important for cybersecurity?

15

When evaluating Patch Management, what aspect do you think is the most important to look for?

32

What patch management solution do you recommend?

28

What solution should we use for upgrading and patching OS to remediate vulnerabilities?

82

Why is Patch Management important for companies?

18

What are Pros and Cons of Cloud-based Patch Management?