Licensing is the most valuable. Qualys provides the best licensing for companies. It is the best product for the development purposes of web applications. The product has a lot of integrations.
Learn what your peers think about Qualys Web Application Scanning. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
Qualys WAS' most valuable features are the navigation flow of the UI and the option for a different layer of security (identification and operation through email and mobile).
Lead Cyber Security engineer at a tech services company with 201-500 employees
Real User
May 19, 2021
I have found the detection of vulnerabilities tool thorough with good results and the graphical display output to be wonderful and full of colors. It allows many types of outputs, such as bar and chart previews.
Assistant Manager - Cyber & Cloud Security at a financial services firm with 1,001-5,000 employees
Real User
Aug 16, 2018
It combines both web application vulnerability management and internal vulnerability management on one platform and dashboard. Usually, you have to purchase separate tools.
Qualys Web Application Scanning (WAS) is a fully cloud-based web application security scanner. The scanner will automatically crawl periodically and test web applications to discover potential vulnerabilities, including cross-site scripting (XSS) and SQL injection. The consistent testing equips the automated service to generate consistent results, lessen false positives, and offer the ability to scale to protect thousands of websites effortlessly.
Qualys Web Application Scanning is bundled...
The vulnerability management feature is a strong one. And also the patch management feature.
The product prevents possible vulnerabilities in our network.
Qualys Web Application Scanning has multiple features like threat protection and container security scanning in one box.
It is a good product for website penetration testing to detect vulnerabilities.
Its most valuable features are patch management, vulnerability management, and PCI compliance.
Licensing is the most valuable. Qualys provides the best licensing for companies. It is the best product for the development purposes of web applications. The product has a lot of integrations.
The most valuable feature of Qualys Web Application Scanning is the effective scanning that can be done.
It works with many different products.
Qualys WAS' most valuable features are the navigation flow of the UI and the option for a different layer of security (identification and operation through email and mobile).
Qualys' process of updating signatures is something we really appreciate, and it's way ahead of its industry peers.
I have found the detection of vulnerabilities tool thorough with good results and the graphical display output to be wonderful and full of colors. It allows many types of outputs, such as bar and chart previews.
It is easy to use.
The feature that I have found most valuable is the progressive scan. It is good. It's done in 24 hours.
The interface is user-friendly and easy to understand.
The simplicity of exporting reports and the simplicity and clarity of the reports included with the product are good.
With our vulnerabilities under control, it's putting our services in compliance and minimizing our risk for exposure.
The most valuable feature is that we are able to scan the services and put credentials like a user ID password. We can verify the vulnerability level.
It combines both web application vulnerability management and internal vulnerability management on one platform and dashboard. Usually, you have to purchase separate tools.
We can do scanning and submit reports straight to the customers when there are new vulnerabilities, then tell them whether they are affected or not.