Qualys VMDR Reviews

Name: Qualys VMDR
Brand: Qualys
Rating: 4.2 (96 reviews)

Vendor: Qualys

4.2 out of 5

96 reviews
94% willing to recommend

Leave a review

What is Qualys VMDR?

Vulnerability Management, Detection, and Response (VMDR) is a cornerstone product of the Qualys TruRisk Platform and a global leader in the enterprise-grade vulnerability management (VM) vendor space. With VMDR, enterprises are empowered with visibility and insight into cyber risk exposure - making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure their actual risk exposure over time.

Get the Qualys VMDR Buyer's Guide and find out what your peers are saying about Qualys VMDR, Wiz, ServiceNow and more!

Qualys VMDR is the #1 ranked solution in top Risk-Based Vulnerability Management solutions, #2 ranked solution in top Configuration Management Databases, #3 ranked solution in top IT Asset Management solutions, #3 ranked solution in top Vulnerability Management solutions, and #9 ranked solution in Container Security Solutions. PeerSpot users give Qualys VMDR an average rating of 8.4 out of 10. Qualys VMDR is most commonly compared to Wiz: Qualys VMDR vs Wiz. Qualys VMDR is popular among the large enterprise segment, accounting for 59% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 16% of all views.

Helped 880,315 peers since 2012

Featured Qualys VMDR reviews

Vaibhav Ghule

Soc Lead & Edr Administration at Persistent Systems

From what I have seen and communicated with my team, True Risk is something that highlights separately. True Risk identifies which vulnerability needs patching, not solely based on the CVSS score. There could be vulnerabilities with higher CVSS scores, but it is not necessary to patch them on a priority basis. There could be others that need remediation despite having low CVSS scores. The prioritization from True Risk is what I appreciate the most. Qualys VMDR's continuous monitoring capabilities help us respond to emergent threats by enabling my team to reach out to the security engineers whenever there is any detection of a vulnerability, informing them about it, and creating an incident. We work through the incident response phases. We identify the vulnerability and take necessary decisions on whether we need to patch or update software on which vulnerabilities are identified. If there are vulnerabilities regarding open ports or open services, we decide to block the exposed ports.

Read full review

reviewer2753559

Cyber Security Solution Engineer at a computer software company with 201-500 employees

The best features Qualys VMDR offers include built-in threat intelligence for prioritizing high-risk vulnerabilities and integrated patch management to remediate a vulnerability, providing coverage on the network level and on the OS level as well. Qualys VMDR has positively impacted my organization by reducing vulnerability exposure time through faster detection and patching, and it has improved compliance reporting with accurate and up-to-date data. It also lowered manual effort for the security team by automating workflow. One specific outcome I can share is that it has decreased by 30%.

Read full review

reviewer2588394

Works at a comms service provider with 1-10 employees

What I find valuable about Qualys VMDR is the capability of the tool and its user-friendliness. It is easy to use and provides accurate results, which is exactly what we are looking for. The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent. The tool's integration between Patch Management and other Qualys products is also indispensable.

Read full review

Qualys VMDR mindshare

Product category:

As of January 2026, the mindshare of Qualys VMDR in the Vulnerability Management category stands at 5.0%, down from 9.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Vulnerability Management Market Share Distribution
Product	Market Share (%)
Qualys VMDR	5.0%
Wiz	7.5%
Tenable Nessus	5.2%
Other	82.3%

Vulnerability Management

PeerResearch reports based on Qualys VMDR reviews

Type	Title	Date
Category	Vulnerability Management	Jan 15, 2026	Download
Product	Reviews, tips, and advice from real users	Jan 15, 2026	Download
Comparison	Qualys VMDR vs Wiz	Jan 15, 2026	Download
Comparison	Qualys VMDR vs Tenable Nessus	Jan 15, 2026	Download
Comparison	Qualys VMDR vs SentinelOne Singularity Cloud Security	Jan 15, 2026	Download

Valuable Features

Qualys VMDR's most valuable features include the QID part of CentralList, asset view, scheduled scans, automated reporting, straightforward UI, real-time response, patch management integration, built-in threat intelligence, True Risk prioritization, global asset view, and continuous monitoring. The user-friendly design ensures easy use for beginners. It reduces vulnerability exposure time, improves compliance reporting, automates workflows, and provides a unified cloud security posture view. Users highlight efficient task division and customizable dashboards.

"The initial setup and onboarding process of Qualys VMDR was quite smooth, as we were able to draft the SOPs from the documentation portal itself and everything was available in the documentation, so it was not a hassle for us to get the integrations done on time."
"Qualys VMDR has positively impacted my organization by reducing vulnerability exposure time through faster detection and patching, and it has improved compliance reporting with accurate and up-to-date data."
"Qualys VMDR is easy to understand and provides detailed reports."

Room for Improvement

Qualys VMDR could enhance its support response speed, reporting efficiency, automation capabilities, and integration with third-party tools. Users report that improving the user interface, streamlining processes for managing vulnerabilities, and expanding compatibility, such as agent deployment and network scanning, would be beneficial. Enhanced false positive management, advanced features for patching, and better asset management functionalities could also add value. Reducing costs and providing better documentation are noted areas for improvement.

"The support has not been very responsive, and we are receiving RCAs a little delayed whenever we raise support cases or communicate with the TAMs."
"Qualys doesn't have its own tool to deploy the agents all at once, so we need to use third-party tools such as BigFix or something else to deploy the agents, which is my main concern and should be fixed by the Qualys team."
"There were some issues later with Qualys VMDR regarding security, specifically with numerous false positive reports."

ROI

Qualys VMDR provides significant cost savings in time, money, and resources, aiding in compliance and security enhancement. It facilitates efficient vulnerability management and patch processes, reducing breaches by identifying and addressing vulnerabilities promptly. Users report approximately twenty to thirty percent ROI, improved asset visibility, and decreased vulnerability footprints. Despite rising costs, the integration and time savings contribute to risk reduction, ultimately justifying the investment. Users find it valuable from both financial and operational perspectives.

Pricing

Qualys VMDR pricing is generally considered high, especially for smaller enterprises, though it is justified by its comprehensive features and scalability. Larger organizations find it more reasonable, with costs varying based on the number of IP addresses and modules used. Many users negotiate customizable pricing models, benefitting from discounts for annual subscriptions. While some users report that it offers competitive pricing relative to its capabilities, others note that additional features can significantly increase the overall cost.

"The solution is reasonably priced for the value it provides."
"We have an annual contract for Qualys VMDR. I believe it's for either two years or five years."
"The product is more expensive than that of any other vendor."

Popular Use Cases

Qualys VMDR is primarily utilized for vulnerability management, assisting in scanning infrastructure devices, identifying and prioritizing vulnerabilities, and patch management. Organizations leverage it for comprehensive asset detection across cloud and on-premise environments, enabling automated report generation and compliance monitoring. It supports continuous security posture monitoring, integrated patch deployments, and facilitates incident response workflows. Qualys VMDR enhances enterprise visibility by tracking devices and maintaining up-to-date system security configurations.

Service and Support

Many users find Qualys VMDR's customer service satisfactory; however, some experience slow technical support responses. While some commend the promptness and expertise, others face delays and repetitive scripting. Response times could improve, yet many find technical support helpful for troubleshooting and implementing solutions. Accessibility issues arise due to ticket escalation, which can be time-consuming. Remote sessions and email support are beneficial, although some desire more direct interaction. Overall, users see potential for progress in support experience.

Deployment

Users found Qualys VMDR's initial setup straightforward and easy, often completed in days. Clear documentation and support facilitated deployment, while cloud-based management eased maintenance. Some noted complexities, especially in integrating with larger networks or during customization. Scanning was quickly operational, typically requiring minimal personnel. While setup simplicity was lauded, challenges included a steep learning curve and integration issues. Overall, many appreciated its ease and speed relative to other tools.

Scalability

Qualys VMDR demonstrates excellent adaptability, performing effectively for enterprises with tens of thousands of assets. It is cloud-based, enabling seamless deployment across various locations. Users report it manages expansion efficiently, though scaling might impact costs. Instances of smooth operation with numerous users are frequent, and there are seldom issues with functional growth. The system accommodates significant user bases, with most acknowledging its ease in handling sizable infrastructures and variability in user needs.

Stability

Qualys VMDR demonstrates high stability with users rarely facing disruptions. Downtime is minimal and often scheduled. Stability ratings frequently reach eight to nine out of ten. Users report the platform reliably handles vulnerabilities and provides consistent performance. Occasional issues arise, but are quickly addressed. Notifications for updates and maintenance keep stability predictable. During pandemics, connectivity problems were noted, but were linked to external factors. Overall, users find Qualys VMDR a robust and dependable tool.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Qualys VMDR Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	8
Large Enterprise	56

By reviewers

By visitors reading reviews
Company Size	Count
Small Business	576
Midsize Enterprise	340
Large Enterprise	1339

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

10%

Manufacturing Company

Government

University

Healthcare Company

Retailer

Insurance Company

Media Company

Educational Organization

Comms Service Provider

Energy/Utilities Company

Outsourcing Company

Performing Arts

Real Estate/Law Firm

Construction Company

Wholesaler/Distributor

Non Profit

Legal Firm

Transportation Company

Hospitality Company

Consumer Goods Company

Logistics Company

Pharma/Biotech Company

Recreational Facilities/Services Company

Aerospace/Defense Firm

Marketing Services Firm

Compare Qualys VMDR with alternative products

Learn more about Qualys VMDR

Qualys VMDR offers an all-inclusive risk-based vulnerability management solution to prioritize vulnerabilities and assets based on risk and business criticality. VMDR seamlessly integrates with configuration management databases (CMDB), Qualys Patch Management, Custom Assessment and Remediation (CAR), Qualys TotalCloud and other Qualys and non-Qualys solutions to facilitate vulnerability detection and remediation across the entire enterprise.

With VMDR, users are empowered with actionable risk insights that translate vulnerabilities and exploits into optimized remediation actions based on business impact. Qualys customers can now aggregate and orchestrate data from the Qualys Threat Library, 25+ threat intelligence feeds, and third-party security and IT solutions, empowering organizations to measure, communicate, and eliminate risk across on-premises, hybrid, and cloud environments.

Qualys VMDR was previously known as Qualys VM, QualysGuard VM, Qualys Asset Inventory, Qualys Container Security.

Qualys VMDR customers

Agrokor Group, American Specialty Health, American State Bank, Arval, Life:), Axway, Bank of the West, Blueport Commerce, BSkyB, Brinks, CaixaBank, Cartagena, Catholic Health System, CEC Bank, Cegedim, CIGNA, Clickability, Colby-Sawyer College, Commercial Bank of Dubai, University of Utah, eBay Inc., ING Singapore, National Theatre, OTP Bank, Sodexo, WebEx

Title	Rating	Mindshare	Recommending
Wiz	4.5	7.5%	96%	33 interviews Add to research
ServiceNow	4.3	N/A	91%	224 interviews Add to research

Author info	Rating	Review Summary
Soc Lead & Edr Administration at Persistent Systems	4.0	I use Qualys VMDR to manage vulnerabilities and coordinate remediation, appreciating its True Risk prioritization, though I've faced cloud agent issues, UI latency, and slow support responses; overall, it's effective but needs improvements in query building and stability.
Cyber Security Solution Engineer at a computer software company with 201-500 employees	5.0	I've used Qualys VMDR for a year to detect and remediate vulnerabilities efficiently, benefiting from its threat intelligence and patch management, though agent deployment for over 1,000 assets needs improvement. Overall, it's been impactful and reliable.
Works at a comms service provider with 1-10 employees	4.5	We use Qualys VMDR for daily vulnerability management, benefiting from its user-friendly interface and accurate results. The tool’s integration and prioritization features enhance our remediation efforts, though the UI needs some improvement. Switching from Nessus and Rapid7, Qualys offers better pricing.
JMS, RPSG Ventures Limited at RP Sanjiv Goenka Group	4.0	I find Qualys VMDR valuable for server vulnerability and patch management due to its user-friendly design and detailed reporting. However, I experienced issues with false positive reports and switched solutions, possibly due to pricing decisions by management.
Information Security Analyst at a tech services company with 51-200 employees	4.0	No summary available
System Admin at a tech services company with 10,001+ employees	4.5	We used Qualys VMDR to monitor vulnerabilities in our systems, finding its user-friendly interface valuable for report generation and teamwork. While it lacks automated patching without an additional module, it significantly improved our efficiency compared to OpenVAS.
Works at a tech consulting company with 10,001+ employees	4.5	I use Qualys VMDR for vulnerability management due to its clarity and customizability, offering value by tracking unused assets. It could improve with quicker issue resolution, user-friendly query options, and enhanced EDR features.
Sr. Vice President Group Security at a financial services firm with 10,001+ employees	4.0	I primarily use Qualys VMDR for vulnerability management due to its ease of use, excellent reporting, integration capabilities, and efficient scanning. Although infrastructure scanning is strong, application security needs improvement. It's superior to competitors like Rapid7 and Nessus.

Qualys VMDR Reviews

What is Qualys VMDR?

Featured Qualys VMDR reviews

Qualys VMDR mindshare

PeerResearch reports based on Qualys VMDR reviews

Valuable Features

Room for Improvement

ROI

Pricing

Popular Use Cases

Service and Support

Deployment

Scalability

Stability

Review data by company size

Top industries

Compare Qualys VMDR with alternative products

Learn more about Qualys VMDR

Qualys VMDR customers

Related questions

Product Categories

Popular Comparisons