Checkmk vs. Qualys VMDR

In our organization which is a mash up of different hardware, software it was important to use an independent tool that wasn’t linked to one manufacturer incase a piece of hardware was dropped from support for example, we also value open-source software highly in our field. It’s important to in our IT environment to be able to customize and tweak software that we run. We don’t use the cloud monitoring aspect so Cannot comment on that side of the software.

Incentivized

Qualys VMDR is best suited for larger companies with a very large IT asset footprint. Qualys VMDR is not suited for businesses that are small and upcoming as the price for the tool is very expensive and could be a budget sink if not used properly. In our organization we use the Qualys VMDR dashboard and reporting in order to collect any vulnerabilities we miss during our routine audits to ensure that our environment is stable and protected for attacks.

Incentivized

• Device Management
• Monitoring Network Quality
• Device Quality of Service
• SNMP
• IOT Monitoring

Incentivized

• Seamless reporting across the different widgets (i.e. TruRisk)
• DEEP-DIVE into an asset's info/vulns
• Baked-in PCI ASV scans that a Qualys QSA can approve

Incentivized

• Updates
• mobile interface
• Agent for android devices

Incentivized

• Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
• We would like to see an improvement on the dashboard interface as it is faulty sometimes.
• Qualys VMDR should focus on more competitive pricing as it is very expensive.

Incentivized

Very helpful software and I highly recommend to have on hand as a tool for testing, troubleshooting, and monitoring.

Incentivized

Next to Veeam (which is a tremendous product for backup/DR) this is the best service/software I have used in the past three decades. Should be called the Swiss Army Knife of security.

Incentivized

Overall Checkmk is a great product that is made and ran by a European company that is open source and highly customizable, great support if needed. On prem support is a must for our organization which Checkmk supports. Our organization has been using Checkmk for over 5 years now Performance of the software runs excellent on its own Linux server, for any company with a good Linux admin, you can have a lot of un tweaking and creating custom checks for every aspect of your environment.

Incentivized

infrastructure to identify vulnerabilities

Always available with the exception on maint windows

Incentivized

Once in a while it would be slow -

Incentivized

This is iron but I am giving it 5 star and I can give more If I can do because they are best in support. So once you own this product they will assign a dedicated support for you and when you are under the weather with anything just connect them with anything call, ping or ticket they will come like Genie.

Not really - the integrations via connectors is not heavy lifting. Any complexity has to do with a service that requires more steps (i.e. AWS/GCP)

Incentivized

Checkmk free version is far superior to PRTG free version. For the paid versions PRTG was more efficient and easier to use. Checkmk provides unlimited services on their free version while PRTG is limited. We like to use the free version to avoid monthly or annual costs while still utilizing the same SNMP features.

Incentivized

It is a very similar tool but Qualys VMDR is much better when it comes to reporting and solutions provided. Asset management is really good in Qualys VMDR. Qualys VMDR support is really quick , you can get a TPM if you run into any issues. Qualys VMDR has wide variety of scanning options which lacks in tenable.

Incentivized

MOSTLY good - but as noted having all features purchased on portal only - nothing that is not purchased.

Incentivized

Outside some pretty arcane apps or OS this is painless. The problem - and self-inflicted - is that older stuff is not supported.

Incentivized

• avoid downtime
• Plan updates based on usage of a VM or network switch to avoid impacting users
• User satisfaction increased due to less visible downtime or issues with our IT infrastructure.

Incentivized

• Cut down on manual efforts to investigate or remediate vulnerabilities, which can be a big driver of ROI
• Avoidance of potential incidents with upfront risk mitigation
• Patching efficiency gains

Incentivized