What users are saying about
4 Ratings
6 Ratings
4 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 8.7 out of 100
6 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 6.6 out of 100

Likelihood to Recommend

Netsparker

Netsparker is very thorough but can take a very long time to scan a web application. It can also take a long time to learn and configure. Its thoroughness is a very good part of the product but if the application does [not] need this thoroughness it is probably a waste of time to run Netsparker on the website.
Glenn Jones | TrustRadius Reviewer

Qualys WAS

It does have its pros but they are outweighed by the cons. There are better scanners out there. WAS gets stuck at scanning a single page for such a long time that it barely covers any part of the application before reaching the 24-hour limit and concluding testing. It could be also because of the nature of our application, but I would expect dynamic scanners to be a bit smarter than this.
Anonymous | TrustRadius Reviewer

Pros

Netsparker

  • NetSparker has excellent customer service. When our team had to learn to use it for the first time, we had to communicate directly with NetSparker consultants.
  • NetSparker is very user-friendly. It's UI is organized and keeps all the different scans we have set-up in a very clean visual.
  • Netsparker has a selection of workflows and integration tools that make it useful for keeping all of my teammates on the same page.
Jatel Desai | TrustRadius Reviewer

Qualys WAS

  • Excellent coverage in terms of vulnerabilities. From SQL injections to buffer overflows.
  • It is integrated with the Qualys Cloud Platform, which is our company-wide vulnerability management solution.
Anonymous | TrustRadius Reviewer

Cons

Netsparker

  • Netsparker Cloud is expensive and restricts the number of website URLs that you are allowed to scan. This restricts us from scanning all of the websites that we create and only allows us to scan a small subset of number of the website we produce.
  • Netsparker is difficult to configure and I often need to open a ticket with support to figure out how to use the product. I have been vulnerability testing websites for over 10 years and I still don't think I really know how to use Netsparker.
  • Netsparker can take a very long time to complete a scan due to the number of items it can scan for. Be certain to reduce the technologies that your scan will be looking at. Also, expect a large website to possibly take over two days to complete. Not something you really want to have happen on a developer checking on some source code.
Glenn Jones | TrustRadius Reviewer

Qualys WAS

  • Sometimes support can be a bit slow off the mark but in general it is good.
  • The scans can take longer than anticipated.
  • The reports can take a lot of customizing.
Larry Sullivan | TrustRadius Reviewer

Support Rating

Netsparker

Netsparker 10.0
Based on 1 answer
NetSparker support is amazing. When first introducing this software to the team, there was a lot of communication going on between Netsparker consultants and our team. They have answered our questions very efficiently and have had consultants come to our department for training. They are open to suggestions for improvements and enhancements as well.
Jatel Desai | TrustRadius Reviewer

Qualys WAS

Qualys WAS 8.0
Based on 2 answers
They had a support page within the WAS to report any concerns or seek help. But the UI of that is not smooth. Regardless support staff were pretty responsive and helpful. They scheduled calls to understand and address our problems. Email support is good as well.
Anonymous | TrustRadius Reviewer

Alternatives Considered

Netsparker

I currently use OWASP ZAP, Burp Suite Professional and Veracode Dynamic Scan. ZAP is very easy to use and the web developers use it regularly. Burp Suite is very customizable as is Netsparker but usually take much less time to scan a website. Both of these tools are programmable and allow me to add special items to a scan when I need it. They are also much better documented. Veracode also has a static code analysis tool that we use much more often then the dynamic analysis tool but we do use both parts of Veracode.
Glenn Jones | TrustRadius Reviewer

Qualys WAS

The Qualys Web Application Scanning (WAS) is integrated with our Qualys Cloud Platform so that we can have all the vulnerabilities in one single place. Also, the reporting capabilities of the Qualys Web Application Scanning (WAS) is way higher than any other vulnerability management tool in the market (especially in terms of compliance reports, such as PCI and SOX).
Anonymous | TrustRadius Reviewer

Return on Investment

Netsparker

  • NetSparker has saved the team a lot of time since the scans quicker than our older software.
  • NetSparker has been costing the company a lot compared to previous security software.
  • Netsparker has helped improved our overall business objectives by finding an efficient and collaborative way to run scans on our systems.
Jatel Desai | TrustRadius Reviewer

Qualys WAS

  • As a consultant Qualysguard WAS is a great tool in my toolbox for testing Web Applications for small to medium companies.
  • Fast and efficient you can start a consulting job quickly, giving feedback to a client almost immediately.
  • Never leave home without it.
Larry Sullivan | TrustRadius Reviewer

Pricing Details

Netsparker

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Qualys WAS

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Add comparison