January 09, 2023

Automated Threat Protection reaches all corners of our organization to provide an end-to-end security solution for the 21st Century

Item: Qualys TruRisk Platform
Rating: 7
Author: Verified User

Verified User

Strategist in Information Technology

Information Technology & Services Company, 5001-10,000 employees

Score 7 out of 10

Vetted Review

Reseller

Software Version

Qualys Cloud Platform

Modules Used

Global AssetView
CyberSecurity Asset Management
Certificate Inventory
Threat Protection
Continuous Monitoring
Patch Management
SaaS Detection & Response
Cloud Inventory
Cloud Security Assessment
Web App Scanning
Web App Firewall

Use Cases and Deployment Scope

Qualys Cloud Platform provides our organization with the tools needed to protect our organization, from end-to-end. It bolsters our security stance in a multi-faceted approach, including our IT infrastructure, our data and applications in the cloud, our endpoints, and compliance all over the world. The best feature of Qualys would be it's automated threat protection which gives us alerts & warnings in realtime, leading to actionable insights that keep our business secure.

Pros and Cons

Real time threat protection, with alerts & remediation
Total visibility into the security of our organization via a single-pane
Easily scalable for additional infrastructure, end users, and policy updates

Customer support tends to be slower, often leading to the tail end of guaranteed SLA's
Major downside is that QCP charges you for each scanner, leading to high cost
False positives can end up wasting more time, rather than saving it

Most Important Features

Real time threat protection & quick notifications
End to end security solution which includes compliance
Much faster detection of Log4J compared to other products we tested/used

Return on Investment

Less threats and incidents means more time saved fixing issues, large improvement on our ROI
Less vulnerabilities and incidents also means a positive public image, which can greatly impact our business in a negative way, this also provides a large improvement on ROI
False positives on threats/risks leads to time wasted remediating, and also makes us question the validity of a threat, mildly negative impact on ROI

Alternatives Considered

Nessus

We find that Nessus is a great product, on par if not slightly better compared to Qualys in terms of their pricing model. However, Qualys Cloud Platform has better quality reporting, and offers great tips and suggestions on quickly closing a gap and eliminating the risk. In our organization, both products are great and meet our expectations, but due to pricing, we favor Nessus slightly more.

Key Insights

Do you think Qualys TruRisk Platform delivers good value for the price?

Not sure

Are you happy with Qualys TruRisk Platform's feature set?

Yes

Did Qualys TruRisk Platform live up to sales and marketing promises?

Yes

Did implementation of Qualys TruRisk Platform go as expected?

I wasn't involved with the implementation phase

Would you buy Qualys TruRisk Platform again?

Yes

Likelihood to Recommend

Qualys Cloud Platform is well suited for organizations that need additional tools to secure and bolster their security from end to end. The automated, real-time threat protection is very quick to notify an admin of potential vulnerabilities and risks, as well as recommending quick fixes to resolve/close the gap before an incident occurs. QCP excels at portraying all of these in a single pane of glass, and find that the Qualys reports are more detailed than competitor product lines. One of our big issues with QCP is that you do have to pay for each scanner, which can quickly add up to large costs. For this reason, I would rate Qualys at a ~7 due to great features and functionality, but overall value could be better for a large organization. I would also say that QCP may make more sense for smaller organizations due to this pricing model.