#1 most frequent
United States of America
62.1%1,816 installations of 2,926
What is Qualys VMDR?
Qualys VMDR 2.0 with TruRisk gives enterprises visibility and insight into cyber risk exposure with the goal of making it easy to prioritize vulnerabilities, assets, or groups of assets based on business risk. Security teams can take action to mitigate risk, helping the business measure its true risk, and track risk reduction over time.
Categories & Use Cases
Product Demos
Top Performing Features
Vulnerability Classification
Prioritizing vulnerabilities, to determine which vulnerabilities are most urgent and require a quicker resolution.
Category average: 8.6
Automated Alerts and Reporting
Systems in place to automatically alert, report, or notify of issues that may need timely remediation.
Category average: 8.1
Vulnerability Intelligence
Software that is able to label and store information about vulnerabilities to access for future use cases.
Category average: 8.1
Areas for Improvement
Threat Intelligence Reporting
Generates reports that display information on threats (such as name, type, frequency of attack, area affected, etc.)
Category average: 7.4
Automated Threat Identification
Leveraging multiple sources of information (such as threat intelligence databases) to automatically identify threats.
Category average: 7.7
Network Analytics
Analyzes various data reports and logs (DNS, firewall, user data, security information etc.) to identify threats in a network.
Category average: 7.2
Who Buys & Uses Qualys VMDR
#2 most frequent
United Kingdom of Great Britain and Northern Ireland
7.3%215 installations of 2,926
#3 most frequent
Canada
5.2%152 installations of 2,926
The Swiss Army Knife of SecTools
Use Cases and Deployment Scope
The question to ask this is - what DOESN'T Qualys VMDR not do? Here are the widgets I have used: - Vuln scans of devices (server/PC/network) - Patch mgmt - Threat intel feed (with prioritization & use of MITRE) - Asset mgmt - PCI ASV onboard
Pros
- Seamless reporting across the different widgets (i.e. TruRisk)
- DEEP-DIVE into an asset's info/vulns
- Baked-in PCI ASV scans that a Qualys QSA can approve
Cons
- Add the container feature a little better
- Less of use API's & more connectors to keep it simple for onboarding data
- Agent for network devices - akin to what I get for server/desktop
Return on Investment
- Taking the man-hours out & doing it with Qualys VMDR Vuln scans (i.e. CAPAT)
- Same for patch mgmt
- TruRisk gives super info on what your attack surface looks like
Usability
Alternatives Considered
Tenable Nessus, Metasploit, BeyondTrust Network Security Scanner and powered by Retina (Legacy)
Other Software Used
Tenable Nessus, Google Workspace, Google Cloud Platform
Vulnerability Management Detection
Use Cases and Deployment Scope
VMDR is using to identification, threat prioritization and patch management detection and EOL/EOS support detection.
Pros
- Asset and inventory management
- vulnerability management
- threat prioritization
- Patch management
Cons
- High cost
Return on Investment
- Patching and remediation
- Real-time vulnerability and misconfiguration detection
Usability
A single guard on door with thousand hands.
Use Cases and Deployment Scope
Integration was one of our key challenges as we were going through a consolidation of many tools. Bringing everything together and getting visibility in one Qualys dashboard has helped us. To secure our IT infrastructure and manage all risks related to our assets in one place is very easy now. Now we can see everything related to asset on dashboard and take action quickly.
Pros
- Cloud Security
- Network Security
- Infrastructure Security
- Asset Management
- Patch Management
- Compliance
- Reporting
Cons
- Patch Management
- Application Security
- Ghost asset scanning
Most Important Features
- Asset Management
- Compliance
- Cloud Security
Return on Investment
- It Increases Visibility
- It robust security posture
- Sometimes Bit slow because of bandwidth
Alternatives Considered
Nessus
Other Software Used
Rapid7 InsightVM, Tenable.io
Qualys VMDR is a MUST for any large IT Department!
Use Cases and Deployment Scope
In our organization we use the Qualys VMDR cloud solution in order to compliment our asset management team in recognizing vulnerabilities with our assets, collect information on our our IoT assets, and analyze risk with a proactive approach. In our line of work we focus highly on ensuring cybersecurity risks are at an all time low and Qualys VMDR reports help with that immensely as we have such a large environment.
Pros
- Qualys VMDR automates the remediation process for risks without code.
- Scans and detects all of our assets whether they are IT or IOT
- Analyzes our environment for misconfigurations and measures risk against industry benchmarks
Cons
- Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
- We would like to see an improvement on the dashboard interface as it is faulty sometimes.
- Qualys VMDR should focus on more competitive pricing as it is very expensive.
Most Important Features
- Automated risk remediation
- Report comparisons to industry benchmarks allow us to fortify at an enterprise level.
- Give visibility of what devices and assets have exposure to the internet to help reduce cybersecurity risks.
Return on Investment
- The Qualys VMDR reports allow us to be proactive in mitigating risks which is an immediate positive ROI
- With the asset scans we are able to see which devices we own and which ones are no longer in our environment and we can realize cost easier.
- It helps us prevent cyber security attacks which also provides a great ROI as we lower the chances of outages.
Alternatives Considered
Syxsense Secure
Other Software Used
Microsoft Azure Active Directory, Microsoft Power BI, Domo
Qualys VMDR detailed review
Use Cases and Deployment Scope
We have a big customer which has over 2 million devices to manage and it is a very complex infrastructure. Qualys VMDR did come in handy to manage vulnerability aspect of management. Its is very good tool to use and easy to learn. It has wide set of functionality with role management as well in place.
Pros
- vulnerability detection
- updated CVEs and support from product
- Reporting
- Scheduling tasks
Cons
- Asset Management
- Custom Reporting option
- More options on the dashboard customization
Most Important Features
- Reporting
- Asset Management
- Visibility into the vulnerable assets at a glance
Return on Investment
- Faster patching
- Easy reports for multiple teams to work in coordination
- Solutions to patch vulnerabilities
Alternatives Considered
Tenable.io
Other Software Used
Akamai Bot Manager, Akamai Kona Site Defender, ServiceNow IT Asset Management, Salesforce CMS
