No more typing reviews! Try our Samantha, our new voice AI agent.
Qualys Web Application Scanning Logo

Qualys Web Application Scanning pros and cons

Vendor: Qualys
3.8 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

QualysGuard provides fast and assured results for external and PCI scans.
It easily scales without major challenges and offers comprehensive cloud-based and easily deployable features.
It integrates well with other tools and creates comprehensive reports, making remediation easy.
Its single console provides consolidated reporting from on-prem to cloud compliance, covering multiple security aspects.
It ensures accurate scans with minimal false positives and provides valuable features like patch and vulnerability management.

CONS

Qualys Web Application Scanning has issues with false positives, which could be reduced with algorithm improvements.
Pricing for Qualys Web Application Scanning is considered expensive and should be more competitive.
Qualys Web Application Scanning lacks full platform coverage for the Policy Compliance model, which needs enhancement.
Concurrent scan capabilities in Qualys Web Application Scanning are limited, making scalability challenging.
Qualys Web Application Scanning does not support automatic crawling and deep testing compared to competitors like IBM AppScan.
 

Qualys Web Application Scanning Pros review quotes

it_user335103 - PeerSpot reviewer
Info-Security Consultant at a financial services firm with 1,001-5,000 employees
Oct 30, 2015
It protects against zero-day vulnerabilities, like Heartbleed.
it_user488199 - PeerSpot reviewer
Senior Security Systems Engineer at a computer software company with 501-1,000 employees
Jul 25, 2016
WAS gave us visibility into our externally exposed web applications and showed us vulnerabilities that we were not aware of and did not know how to test for.
it_user494979 - PeerSpot reviewer
Module Lead with 1,001-5,000 employees
Aug 11, 2016
Qualys is perfect, scalability-wise.
Learn what your peers think about Qualys Web Application Scanning. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
887,041 professionals have used our research since 2012.
it_user395523 - PeerSpot reviewer
Sr. Director, Cloud Platform Engineering at a tech vendor with 5,001-10,000 employees
Jun 30, 2017
We’re a Linux shop and Qualys gave us good Linux vulnerability scanning; it reports only a few glaring false-positive errors, and the long baseline of iterative results was valuable to track changes and our rate of improvement while access to the API let us automate its use in our CI/CD pipeline for machine images.
it_user700140 - PeerSpot reviewer
Ex Senior Security Analyst and Onsite consultant at Paladion Networks
Feb 18, 2018
​QualysGuard web-based scanner is very useful for performing external penetration and PCI scans from remote locations.​
it_user563475 - PeerSpot reviewer
Deputy Manager at a tech services company with 10,001+ employees
Feb 28, 2018
Network scanner has good reporting, coverage was also good.
CybSec9734 - PeerSpot reviewer
Cyber Security Consultant at a tech services company with 10,001+ employees
May 15, 2018
Key features include: Cloud-based, so the installation is not so tedious. Easily deployed. Highly scalable. Comprehensive reporting.
Reviewer32192 - PeerSpot reviewer
Delivery Manager at a tech vendor with 1,001-5,000 employees
Aug 2, 2018
We can do scanning and submit reports straight to the customers when there are new vulnerabilities, then tell them whether they are affected or not.
Daniel_Ndiba - PeerSpot reviewer
Assistant Manager - Cyber & Cloud Security at a financial services firm with 1,001-5,000 employees
Aug 16, 2018
It combines both web application vulnerability management and internal vulnerability management on one platform and dashboard. Usually, you have to purchase separate tools.
Consultab6ea - PeerSpot reviewer
Consultant at a tech services company with 1,001-5,000 employees
Aug 22, 2019
The most valuable feature is that we are able to scan the services and put credentials like a user ID password. We can verify the vulnerability level.
 

Qualys Web Application Scanning Cons review quotes

it_user335103 - PeerSpot reviewer
Info-Security Consultant at a financial services firm with 1,001-5,000 employees
Oct 30, 2015
It's missing some zero-day patches.
it_user488199 - PeerSpot reviewer
Senior Security Systems Engineer at a computer software company with 501-1,000 employees
Jul 25, 2016
The organization of the assets was a little confusing and overwhelming.
it_user494979 - PeerSpot reviewer
Module Lead with 1,001-5,000 employees
Aug 11, 2016
The tool should have a live HTTP editor and more configuration options for some situations, such as handling applications that have URL rewriting enabled.
Learn what your peers think about Qualys Web Application Scanning. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
887,041 professionals have used our research since 2012.
it_user395523 - PeerSpot reviewer
Sr. Director, Cloud Platform Engineering at a tech vendor with 5,001-10,000 employees
Jun 30, 2017
The licensing and user permissions are a little wonky for a DevOps team to use, probably because it’s traditionally an InfoSec tool.
it_user700140 - PeerSpot reviewer
Ex Senior Security Analyst and Onsite consultant at Paladion Networks
Feb 18, 2018
They should try to include business logic vulnerabilities in the scanner testing.
it_user563475 - PeerSpot reviewer
Deputy Manager at a tech services company with 10,001+ employees
Feb 28, 2018
Please add manual penetration testing features. Also I didn't like the license terms and the features were limited compared to other tools used for web applications.
CybSec9734 - PeerSpot reviewer
Cyber Security Consultant at a tech services company with 10,001+ employees
May 15, 2018
The GUI could be a little less complicated as it opens a lot of new windows for creating search lists, templates, reports, or for scanning purposes.
Reviewer32192 - PeerSpot reviewer
Delivery Manager at a tech vendor with 1,001-5,000 employees
Aug 2, 2018
In terms of the Policy Compliance model which they currently have, not all the platforms are being covered. If they could improve on the Policy Compliance model, since there are policies which are benchmarked against it, this will be helpful for us.
Daniel_Ndiba - PeerSpot reviewer
Assistant Manager - Cyber & Cloud Security at a financial services firm with 1,001-5,000 employees
Aug 16, 2018
The area of false positives could be improved. There are quite a number of false positives as compared to other solutions. They could probably fine tune the algorithm to be able to reduce the number of false positives being detected.
Consultab6ea - PeerSpot reviewer
Consultant at a tech services company with 1,001-5,000 employees
Aug 22, 2019
It should have better automatic reporting.