Cisco Vulnerability Management vs. Qualys VMDR

For user end devices this product has worked great for us. We have been able to find vulnerabilities/risks with certain software in bulk on devices and implement fixes for them very quickly. CVM has also provided us visabity on all our devices that we never had before and we can close gaps security wise a lot faster knowing now where problems are at

Incentivized

Qualys VMDR is best suited for larger companies with a very large IT asset footprint. Qualys VMDR is not suited for businesses that are small and upcoming as the price for the tool is very expensive and could be a budget sink if not used properly. In our organization we use the Qualys VMDR dashboard and reporting in order to collect any vulnerabilities we miss during our routine audits to ensure that our environment is stable and protected for attacks.

Incentivized

• Vulnerability tracking
• Risk Meter reporting to pinpoint specific systems or vulnerabilities
• Provides vulnerability scores to see what is high / medium / low urgency

Incentivized

• Seamless reporting across the different widgets (i.e. TruRisk)
• DEEP-DIVE into an asset's info/vulns
• Baked-in PCI ASV scans that a Qualys QSA can approve

Incentivized

• Faster system scan times in background
• more accurate vulnerability remediation links

Incentivized

• Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
• We would like to see an improvement on the dashboard interface as it is faulty sometimes.
• Qualys VMDR should focus on more competitive pricing as it is very expensive.

Incentivized

Next to Veeam (which is a tremendous product for backup/DR) this is the best service/software I have used in the past three decades. Should be called the Swiss Army Knife of security.

Incentivized

CVM provides a very easy to understand and use interfaces. Dashboards and reporting are compiled nicely when risk meters are created. After initial setup of software cisco onboarding teams do an amazing job going over all areas of this software to provide best overall usability of the product. Against other tools setup and usability is at a higher standard

Incentivized

infrastructure to identify vulnerabilities

Always available with the exception on maint windows

Incentivized

Once in a while it would be slow -

Incentivized

This is iron but I am giving it 5 star and I can give more If I can do because they are best in support. So once you own this product they will assign a dedicated support for you and when you are under the weather with anything just connect them with anything call, ping or ticket they will come like Genie.

Not really - the integrations via connectors is not heavy lifting. Any complexity has to do with a service that requires more steps (i.e. AWS/GCP)

Incentivized

We run a flavor of multiple products and CVM enhances/complements those tools by pinpointing where the vulnerabilities are at on our network. Intune and Automox being products CVM works well with when its time to patch affected systems. Tenable we used prior to CVM and its product was too complex and clunky and always had issues with asset duplication. CVM simplified vulnerability scanning and made it a lot easier to manage compared to Tenable

Incentivized

It is a very similar tool but Qualys VMDR is much better when it comes to reporting and solutions provided. Asset management is really good in Qualys VMDR. Qualys VMDR support is really quick , you can get a TPM if you run into any issues. Qualys VMDR has wide variety of scanning options which lacks in tenable.

Incentivized

MOSTLY good - but as noted having all features purchased on portal only - nothing that is not purchased.

Incentivized

Outside some pretty arcane apps or OS this is painless. The problem - and self-inflicted - is that older stuff is not supported.

Incentivized

• We have lowered our companies risk score from 850 to 660 in less than 6 months.
• We have mitigated over 120,000 Vulnerabilities on our network since using CVM.
• We have been able to streamline/prioritize patch management based off scans CVM provides from our assets.

Incentivized

• Cut down on manual efforts to investigate or remediate vulnerabilities, which can be a big driver of ROI
• Avoidance of potential incidents with upfront risk mitigation
• Patching efficiency gains

Incentivized