TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    PortSwigger Burp Suite

    Score9.2 out of 10
    N/AThe Burp Suite, from UK-based alcohol-themed software company PortSwigger Web Security, is an application security and testing solution.N/A

    Qualys VMDR

    Score9.4 out of 10
    N/AQualys VMDR 2.0 with TruRisk gives enterprises visibility and insight into cyber risk exposure with the goal of making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure its true risk, and track risk reduction over time.N/A
    Pricing
    PortSwigger Burp SuiteQualys VMDR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    PortSwigger Burp SuiteQualys VMDR
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    PortSwigger Burp SuiteQualys VMDR
    Considered Both Products
    PortSwigger Web Security
    No answer on this topic
    Qualys
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    8 Answers
    86%
    Would buy again
    6 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    8 Answers
    100%
    Delivers good value for the price
    6 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    8 Answers
    100%
    Happy with the feature set
    7 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    7 Answers
    100%
    Lived up to sales and marketing promises
    6 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    8 Answers
    100%
    Implementation went as expected
    6 Answers
    Features
    PortSwigger Burp SuiteQualys VMDR
    Threat Intelligence
    Comparison of Threat Intelligence features of PortSwigger Burp Suite and Qualys VMDR
    Feature
    PortSwigger Burp Suite
    -
    Ratings
    Qualys VMDR
    8.4
    7 Ratings
    4% above category average
    Network Analytics00 Ratings7.47 Ratings
    Threat Recognition00 Ratings8.07 Ratings
    Vulnerability Classification00 Ratings9.67 Ratings
    Automated Alerts and Reporting00 Ratings9.27 Ratings
    Threat Analysis00 Ratings8.67 Ratings
    Threat Intelligence Reporting00 Ratings8.07 Ratings
    Automated Threat Identification00 Ratings8.07 Ratings
    Vulnerability Management Tools
    Comparison of Vulnerability Management Tools features of PortSwigger Burp Suite and Qualys VMDR
    Feature
    PortSwigger Burp Suite
    -
    Ratings
    Qualys VMDR
    8.8
    7 Ratings
    6% above category average
    IT Asset Realization00 Ratings9.07 Ratings
    Authentication00 Ratings8.47 Ratings
    Configuration Monitoring00 Ratings9.07 Ratings
    Web Scanning00 Ratings8.66 Ratings
    Vulnerability Intelligence00 Ratings9.27 Ratings
    Best Alternatives
    PortSwigger Burp SuiteQualys VMDR
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    Tenable Nessus
    Score8.8 out of 10
    Enterprises
    No answers on this topic
    Tenable Vulnerability Management
    Score8.9 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    PortSwigger Burp SuiteQualys VMDR
    Likelihood to Recommend
    9.2
    (12 ratings)
    9.6
    (7 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    10.0
    (1 ratings)
    Usability
    9.5
    (5 ratings)
    8.4
    (2 ratings)
    Availability
    -
    (0 ratings)
    10.0
    (1 ratings)
    Performance
    -
    (0 ratings)
    9.0
    (1 ratings)
    Support Rating
    10.0
    (3 ratings)
    8.0
    (2 ratings)
    Implementation Rating
    -
    (0 ratings)
    9.0
    (1 ratings)
    Configurability
    -
    (0 ratings)
    9.0
    (1 ratings)
    Contract Terms and Pricing Model
    -
    (0 ratings)
    9.0
    (1 ratings)
    Ease of integration
    -
    (0 ratings)
    9.0
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    9.0
    (1 ratings)
    Vendor post-sale
    -
    (0 ratings)
    8.0
    (1 ratings)
    Vendor pre-sale
    -
    (0 ratings)
    8.0
    (1 ratings)
    User Testimonials
    PortSwigger Burp SuiteQualys VMDR
    Likelihood to Recommend
    PortSwigger Web Security
    Burp Suite is a good general tool to test websites as long as your website is not too large or you have the time for it to complete. We have some websites that only about five to ten minutes for Burp Suite to complete an attack and a spider only takes about two minutes. Other websites have taken a few hours to complete. I have seen a tester actually run Burp Suite against one of our websites and it took all day to complete.
    Incentivized
    Read full review
    Qualys
    Qualys VMDR is best suited for larger companies with a very large IT asset footprint. Qualys VMDR is not suited for businesses that are small and upcoming as the price for the tool is very expensive and could be a budget sink if not used properly. In our organization we use the Qualys VMDR dashboard and reporting in order to collect any vulnerabilities we miss during our routine audits to ensure that our environment is stable and protected for attacks.
    Incentivized
    Read full review
    Pros
    PortSwigger Web Security
    • The passive scan feature is really awesome, it kind of covers areas that you might miss.
    • The CSRF POC is really helpful to my team. It helps development team see the issue and understand it.
    • Burp intruder and repeater are the features I myself and my team uses the most as it helps us use our payloads in a variety of different ways.
    • Active scan helps the team to ensure coverage for the whole application.
    Read full review
    Qualys
    • Seamless reporting across the different widgets (i.e. TruRisk)
    • DEEP-DIVE into an asset's info/vulns
    • Baked-in PCI ASV scans that a Qualys QSA can approve
    Incentivized
    Read full review
    Cons
    PortSwigger Web Security
    • The interface is a big problem: No matter how many features a software provides you, if the features are not well presented, you will miss most of them when they are actually required. The presentation of the software should be improvised and made more presentable.
    • Tutorial videos for beginners: This software lacks a lot in tutorials. A beginner almost wastes most of the time in finding and understanding the features and the implementation of the same. The software vendor should work on providing more in-depth videos so that people can learn and understand the concepts.
    Incentivized
    Read full review
    Qualys
    • Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
    • We would like to see an improvement on the dashboard interface as it is faulty sometimes.
    • Qualys VMDR should focus on more competitive pricing as it is very expensive.
    Incentivized
    Read full review
    Likelihood to Renew
    PortSwigger Web Security
    No answers on this topic
    Qualys
    Next to Veeam (which is a tremendous product for backup/DR) this is the best service/software I have used in the past three decades. Should be called the Swiss Army Knife of security.
    Incentivized
    Read full review
    Usability
    PortSwigger Web Security
    The workflow between features like Proxy, Scanner, Intruder, and Repeater feels seamless, making it easy to intercept, manipulate, and analyze web traffic. Despite its advanced capabilities, the tool remains accessible and flexible, which significantly speeds up testing without overwhelming the user.
    Incentivized
    Read full review
    Qualys
    infrastructure to identify vulnerabilities
    Read full review
    Reliability and Availability
    PortSwigger Web Security
    No answers on this topic
    Qualys
    Always available with the exception on maint windows
    Incentivized
    Read full review
    Performance
    PortSwigger Web Security
    No answers on this topic
    Qualys
    Once in a while it would be slow -
    Incentivized
    Read full review
    Support Rating
    PortSwigger Web Security
    BurpSuite does not have an amazing customer support. All the major help that you will find is from public forums and Google. Although you will find all the required information on Google, still at time professional support helps you solve the problem in much less time and make your operations go smoothly.
    Incentivized
    Read full review
    Qualys
    This is iron but I am giving it 5 star and I can give more If I can do because they are best in support. So once you own this product they will assign a dedicated support for you and when you are under the weather with anything just connect them with anything call, ping or ticket they will come like Genie.
    Read full review
    Implementation Rating
    PortSwigger Web Security
    No answers on this topic
    Qualys
    Not really - the integrations via connectors is not heavy lifting. Any complexity has to do with a service that requires more steps (i.e. AWS/GCP)
    Incentivized
    Read full review
    Alternatives Considered
    PortSwigger Web Security
    Each tool is specific and are good for what they do. While Burp Suite can perform some level of the same functions, somehow security consultants prefer these tools as additional to the Burp Suite. Maybe due to open source and easy setup when compared to Burp Suite. But Burp Suite allows for one tool for many templates for each project.
    Incentivized
    Read full review
    Qualys
    It is a very similar tool but Qualys VMDR is much better when it comes to reporting and solutions provided. Asset management is really good in Qualys VMDR. Qualys VMDR support is really quick , you can get a TPM if you run into any issues. Qualys VMDR has wide variety of scanning options which lacks in tenable.
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    PortSwigger Web Security
    No answers on this topic
    Qualys
    MOSTLY good - but as noted having all features purchased on portal only - nothing that is not purchased.
    Incentivized
    Read full review
    Scalability
    PortSwigger Web Security
    No answers on this topic
    Qualys
    Outside some pretty arcane apps or OS this is painless. The problem - and self-inflicted - is that older stuff is not supported.
    Incentivized
    Read full review
    Return on Investment
    PortSwigger Web Security
    • Scanned 100% of the orgs public facing web sites with a small team of analysts.
    • Provided a reputable second opinion source to back up the other product in use i.e. Webinspect.
    • Pro version $350 is amazing ROI, considering the thwarted attacks and that it's competition is priced in the tens of thousands last I checked.
    • No successful hacks. Q.E.D. :-)
    Incentivized
    Read full review
    Qualys
    • Cut down on manual efforts to investigate or remediate vulnerabilities, which can be a big driver of ROI
    • Avoidance of potential incidents with upfront risk mitigation
    • Patching efficiency gains
    Incentivized
    Read full review
    ScreenShots