Qualys Policy Compliance is valued for its comprehensive compliance reports and real-time threat detection. Users highlight its high customization, capability to handle unique policies, and seamless integration with SIEM and ticketing tools like Confluence and Jira. Features include defining enterprise policies, automatic compliance checks, comprehensive reporting, and automated patching. The platform's scalability and integration with hybrid clouds are also emphasized. Its intuitive interface enhances asset scanning and increases user expertise through issue investigation.
- "The solution's interface looks good, which enhances asset scanning and ensures automatic patching."
- "The reporting and security checks are valuable."
- "The platform allows multiple features that are very useful. The first one is being able to define the enterprise policy. The second one is to be able to automatically check the compliance level based on that policy, and the third one is that it allows us to generate reports and dashboards to see the compliance level easily."
Qualys Policy Compliance requires enhanced reporting capabilities, management reporting, policy version migration, and faster technical support. Reporting on compliance states needs clarity. Versioning of policies and transitions between industry practices should be smoother. Detection features need improvements for immediate action. The policy implementation process is complex, especially for CIS standards, leading to increased support calls. Beginners need more resources, such as training and a knowledge base, to assist with policy creation and management.
- "Some sort of education or knowledge base about the product would be beneficial for beginners."
- "The policy creation aspect needs improvement."
- "There is no clear mapping for the CIS controls in terms of how they should be implemented into Qualys, so the implementation stage might be a little bit challenging for the customer. That means that the customer will end up opening support cases, which will overload their support team to explain those. If they are somehow published somewhere, it would save time and effort for both sides."
