Try our new research platform with insights from 80,000+ expert users

Qualys VMDR pros and cons

Vendor: Qualys

4.1 out of 5

94 reviews
94% willing to recommend

3,011 followers

Pros & Cons summary

Qualys VMDR excels in vulnerability management with continuous monitoring and effective remediation. It offers efficient scanning and robust reports but is criticized for cost and cloud-based data storage security concerns. The platform faces challenges integrating with third-party systems and improving API speed. Users note slow technical support and false reports. Despite scalability issues, it provides a comprehensive approach to security, though customization in multi-cloud environments is limited.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Qualys VMDR provides comprehensive vulnerability management and patch management features that are crucial for maintaining security posture.

The automation capabilities in Qualys VMDR enhance security operations by enabling quick response to threat findings.

Continuous monitoring and real-time reporting improve the efficiency of detecting and remediating vulnerabilities.

Qualys VMDR's ability to prioritize vulnerabilities aids in focusing remediation efforts on the most critical threats.

Integration capabilities with other platforms, like ServiceNow for ticketing, streamline operations and facilitate better management.

CONS

Qualys VMDR is limited by its cloud-based architecture, which is not preferred by all users.

Qualys VMDR's integration with other products and frameworks like ServiceNow is complex and requires improvement.

Asset management and reporting functionalities in Qualys VMDR are seen as areas needing significant enhancement to be competitive.

Qualys VMDR's current capabilities in scanning for vulnerabilities, including SCADA, IoT, and Industrial Control Systems, are viewed as lacking by clients.

The pricing of Qualys VMDR is considered high when compared to similar products available in the market.

Qualys VMDR Pros review quotes

LG

Works at Coforge Growth Agency

Sep 9, 2024

It's also highly customizable, allowing us to tailor it to our needs.

Read full review

reviewer1708782

Senior Security Consultant at a tech services company with 10,001+ employees

Nov 1, 2021

The most recent is VMDR, which provides a comprehensive overview of how to detect, patch, and remediate specific vulnerabilities.

Read full review

Sr. Vice President Group Security at a financial services firm with 10,001+ employees

Sep 9, 2024

It gives you a lot of options, and it integrates with our ServiceNow for ticketing and all.

Read full review

Free Report: Qualys VMDR Reviews and More

Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.

856,873 professionals have used our research since 2012.

reviewer1324734

Information Security Manager at a outsourcing company with 51-200 employees

Jul 9, 2022

The reporting functionality is great.

Read full review

reviewer1675638

Cyber Security Director at a manufacturing company with 5,001-10,000 employees

Sep 22, 2021

The initial setup is straightforward.

Read full review

AZ

Assistant Manager Solutions at Mutex Systems Pvt. Ltd.

Jul 6, 2022

I find Qualys VM very robust, and it's very useful for vulnerability management and patch management. The value that it brings to my environment is economies of scale. There is no limitation on adding any endpoints. You go by the rule, and it's added once another endpoint is added to our environment. It's automatically installed, and it's less work from our end. It frees up my license automatically if I don't need an endpoint or if my machine is decommissioned. I like the dashboard displays because I don't see any duplication. The most important part is vulnerability management and prioritization. Unlike Symantec, it shows the kind of vulnerability I would want to patch first. It provides a holistic view of the kind of vulnerabilities and the ones I should remediate first. I don't have to do a scan; it just brings up those critical kinds of vulnerabilities like zero-day vulnerabilities and tells me to prioritize them. You have to prioritize these vulnerabilities first and go on with the rest. The dashboard shows me the ones that have been fixed, so I don't have to complete an aging report. The user experience and the graphical interface are good. As it's user-friendly and understandable on an executive level, it brings real value. We also use this solution because it's robust and flexibile.

Read full review

Senior Cybersecurity Engineer at 3M Health Information Systems

Jul 13, 2023

It's very configurable to adjust impact to systems.

Read full review

Head: Cloud Platform Security at BCX Namibia

Aug 8, 2023

The biggest benefit is from a security operations perspective, where we are able to drive our security posture upwards by remediating any discovered vulnerabilities.

Read full review

Senior Global IT Security Specialist at a manufacturing company with 1,001-5,000 employees

Sep 18, 2024

The most valuable features of Qualys VMDR include patch management and the use of virtual scanners to scan appliances and devices, especially those provided by vendors where we cannot manage them ourselves.

Read full review

ITSM & AntiFraud Consultant at a tech company with 51-200 employees

May 16, 2017

Vulnerability management is the most valuable one and it’s a must in every organization.

Read full review

Show 10 more reviews (out of 76)

Qualys VMDR Cons review quotes

LG

Works at Coforge Growth Agency

Sep 9, 2024

In terms of improvement for the web application console, in the older version, things were more segregated and presented in a brief format.

Read full review

reviewer1708782

Senior Security Consultant at a tech services company with 10,001+ employees

Nov 1, 2021

Qualys currently does not have any features for scanning SCADA, IoT, and Industrial Control Systems.

Read full review

Sr. Vice President Group Security at a financial services firm with 10,001+ employees

Sep 9, 2024

From the application security perspective, Qualys has a way to go.

Read full review

Free Report: Qualys VMDR Reviews and More

Learn what your peers think about Qualys VMDR. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.

856,873 professionals have used our research since 2012.

reviewer1324734

Information Security Manager at a outsourcing company with 51-200 employees

Jul 9, 2022

They're still evolving their platform in terms of reporting capabilities.

Read full review

reviewer1675638

Cyber Security Director at a manufacturing company with 5,001-10,000 employees

Sep 22, 2021

The solution is a bit expensive if you do not have access to discounts.

Read full review

AZ

Assistant Manager Solutions at Mutex Systems Pvt. Ltd.

Jul 6, 2022

The price could be better. Asset view is still a legacy feature. I'm not able to extract the information about the asset with complete details. It would be better if they fixed that in the next release. I know Qualys is already working on it, so I'm hopeful it will be available in the next five or six months. That would be something that's changed where I seek improvement.

Read full review

Senior Cybersecurity Engineer at 3M Health Information Systems

Jul 13, 2023

There seems to be a lack of easy onboarding into Qualys.

Read full review

Head: Cloud Platform Security at BCX Namibia

Aug 8, 2023

If anything, I would like to see the user interface modernized a bit more.

Read full review

Senior Global IT Security Specialist at a manufacturing company with 1,001-5,000 employees

Sep 18, 2024

One area for improvement is the simplification of the process to ignore certain vulnerabilities on specific devices.

Read full review

ITSM & AntiFraud Consultant at a tech company with 51-200 employees

May 16, 2017

One of the biggest issues from the clients' perspective is that all Qualys computing is on the cloud.

Read full review

Show 10 more reviews (out of 75)

Related questions

15

Qualys VM vs Tenable Nessus: Comparison

34

How does Tenable Nessus compare with Qualys VM?

148

How does Pentera compare with Qualys VMDR?

34

What are the main differences between Qualys VMDR and Tenable Nessus?

55

How inadvisable is it to use a single vulnerability analysis tool?

23

What are the benefits of continuous scanning for vulnerability management?

22

When evaluating Vulnerability Management, what aspect do you think is the most important to look for?

14

What is a more effective approach to cyber defense: risk-based vulnerability management or vulnerability assessment?

217

What are the main KPIs that need to be implemented to have better posture in vulnerability projects?

99

Which is the best vulnerability scanner tool?