Action1 vs. Qualys VMDR

[Action1 Cloud Remote Monitoring and Management Solution is a] really great tool for organizations looking at a solution that doesn't rely on on-premise infrastructure to manage multiple sites or work-from-home devices. As long as the endpoints are connected to the internet they will show as online in the system.

Qualys VMDR is best suited for larger companies with a very large IT asset footprint. Qualys VMDR is not suited for businesses that are small and upcoming as the price for the tool is very expensive and could be a budget sink if not used properly. In our organization we use the Qualys VMDR dashboard and reporting in order to collect any vulnerabilities we miss during our routine audits to ensure that our environment is stable and protected for attacks.

Incentivized

• Easy remote access to devices. That simple. We have some very unskilled users in the field where asking them to access their PC via conventional remote tools like TeamViewer, Anydesk, etc. was always a pain. Now, all they have to do is ensure their PC is online, and we can connect to them.
• Remote software deploy. Before Action1, we did have some GPOs and scripts, but again - being able to deploy to PCs outside of our office/LAN, is just beautiful. On top of the standard repository, being able to create new packages is very useful for our scenario.
• Inventory Reporting. Recently we had to identify PCs running old versions of Windows. Can't highlight enough how easy it is.

Incentivized

• Seamless reporting across the different widgets (i.e. TruRisk)
• DEEP-DIVE into an asset's info/vulns
• Baked-in PCI ASV scans that a Qualys QSA can approve

Incentivized

• Lots of times Action1 will identify a program that needs to be patched, but then not really have a path laid out to get that done...so they just remain as they are, but are tagged as such.
• Really wants to replace the windows update mechanism. Resists (or did at least) you if you try to keep updates as they are and update occasionally from Action1
• Could develop the scripts section a bit more, looked pretty sparse last time I checked it out.

Incentivized

• Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
• We would like to see an improvement on the dashboard interface as it is faulty sometimes.
• Qualys VMDR should focus on more competitive pricing as it is very expensive.

Incentivized

Price, functionality, and continuous improvement of the product.

Incentivized

Next to Veeam (which is a tremendous product for backup/DR) this is the best service/software I have used in the past three decades. Should be called the Swiss Army Knife of security.

Incentivized

Agent deployment is simple (and silent) - once that is done, you're good to go. Everything is simple, centralized and very easy to work with. There isn't one aspect of this platform that requires crawling over forums and Google, it just works!

Incentivized

infrastructure to identify vulnerabilities

Always available with the exception on maint windows

Incentivized

Once in a while it would be slow -

Incentivized

I never contacted support services

Incentivized

This is iron but I am giving it 5 star and I can give more If I can do because they are best in support. So once you own this product they will assign a dedicated support for you and when you are under the weather with anything just connect them with anything call, ping or ticket they will come like Genie.

very easy to start using it.

Incentivized

Not really - the integrations via connectors is not heavy lifting. Any complexity has to do with a service that requires more steps (i.e. AWS/GCP)

Incentivized

Action1 excels with patch management and their ability to show if applications have been marked as vulnerable. It is also hard to beat their free model where the first 200 are free. When I first started with Action1 it was only 50 endpoints so seeing that expand so much is awesome.

Incentivized

It is a very similar tool but Qualys VMDR is much better when it comes to reporting and solutions provided. Asset management is really good in Qualys VMDR. Qualys VMDR support is really quick , you can get a TPM if you run into any issues. Qualys VMDR has wide variety of scanning options which lacks in tenable.

Incentivized

MOSTLY good - but as noted having all features purchased on portal only - nothing that is not purchased.

Incentivized

Outside some pretty arcane apps or OS this is painless. The problem - and self-inflicted - is that older stuff is not supported.

Incentivized

• Saved hours per week on patching and able to ensure a 100% patching success rate.
• Able to create custom alerting on potential problems as well as able to create some automation to automatically address problems.
• Improved support to our remote locations and users.
• Custom deployments allow us to have a mechanism to deploy custom applications we build as well as other third party applications we need to distribute.

Incentivized

• Cut down on manual efforts to investigate or remediate vulnerabilities, which can be a big driver of ROI
• Avoidance of potential incidents with upfront risk mitigation
• Patching efficiency gains

Incentivized