Qualys VMDR (US Only)

My main use case for Qualys VMDR  is to manage and remediate vulnerabilities and prioritize it based on the criticality score.

I can give a quick, specific example of how I've managed and remediated vulnerabilities using Qualys VMDR : First of all, we use it to quickly detect critical vulnerabilities in the network environment, and apart from that, we are using it to apply patches directly through integrated patch management, which reduces exposure time and human efforts.

I don't have anything else to add about my main use case or how I use Qualys VMDR at the moment.

The best features Qualys VMDR offers include built-in threat intelligence for prioritizing high-risk vulnerabilities and integrated patch management to remediate a vulnerability, providing coverage on the network level and on the OS level as well.

Qualys VMDR has positively impacted my organization by reducing vulnerability exposure time through faster detection and patching, and it has improved compliance reporting with accurate and up-to-date data. It also lowered manual effort for the security team by automating workflow.

One specific outcome I can share is that it has decreased by 30%.

One area where Qualys VMDR can be improved is the missing feature for deploying agents for over 1,000 assets, as we need to do it manually. Qualys doesn't have its own tool to deploy the agents all at once, so we need to use third-party tools such as BigFix  or something else to deploy the agents, which is my main concern and should be fixed by the Qualys team.

That is the main thing I would like to see changed, and apart from that, everything is good.

I have been using Qualys VMDR for the past one year.

We directly purchased Qualys VMDR from Qualys, not through the AWS Marketplace .

Sometimes we are facing downtime, but it is very rare, occurring once in a blue moon.

Qualys VMDR is stable.

Qualys VMDR's scalability is good, and the customer support is good, but sometimes the customer support occasionally delays in response more than expected.

Qualys VMDR's scalability is good, and the customer support is good, but sometimes the customer support occasionally delays in response more than expected. I would rate the customer support an eight.

Positive

We didn't use any solution before Qualys.

My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.

The detail I can share is that it is around 30 to 40%.

One specific outcome or metric I can share is that it has decreased by 30%.

My experience with pricing, setup cost, and licensing shows that we can consider both time and money saved.

Before choosing Qualys VMDR, we didn't evaluate any other options.

I would advise others looking into using Qualys VMDR to make sure that Qualys is compatible with your network, and please ensure that all the configurations are in place before proceeding.

I wasn't offered any gift card or incentive for this review.

On a scale of 1-10, I rate Qualys VMDR a 10.

Public Cloud

Amazon Web Services  (AWS )

My main use cases for Qualys VMDR  are for server vulnerability and missing patches.

The most helpful and useful features of Qualys VMDR  are its user-friendly design.

Qualys VMDR is easy to understand and provides detailed reports.

It impacts my workflow overall, with the patch management features as it has the missing patches listed in detail, making it easier to get a comprehensive report and providing some dashboards that offer visual representation.

There were some issues later with Qualys VMDR regarding security, specifically with numerous false positive reports.

It doesn't take much time to deploy Qualys VMDR. There is a process mentioned already on the website about how to proceed with the installation, so we followed that process.

I am satisfied with the support of Qualys VMDR as they are supportive. However, there are sometimes issues where we cannot talk to customer support directly, and we have to raise tickets, which sometimes takes a lot of time to resolve issues because it goes through their own phase. We cannot change the SLA or the priority of the tickets, so that is an issue.

Positive

Our organization changed to something else due to a higher management decision, and that might be the reason for the change regarding the pricing.

We are not using any AI features with Qualys VMDR.

Overall, I would rate Qualys VMDR as good, giving it an eight.

We use Qualys VMDR  for daily vulnerability management, scanning vulnerabilities, identifying vulnerabilities, reporting, creating dashboards, and the whole vulnerability management process. We also use it for patch management.

What I find valuable about Qualys VMDR  is the capability of the tool and its user-friendliness. It is easy to use and provides accurate results, which is exactly what we are looking for. The prioritization of vulnerabilities has improved our remediation efforts by around thirty to thirty-five percent. The tool's integration between Patch Management  and other Qualys products is also indispensable.

They can tweak their UI since the new version seems a bit jumbled up, and the old UI was more user-friendly.

I have been using Qualys VMDR for three years.

We find Qualys VMDR quite stable and have not faced any performance issues with it.

I believe the solution is scalable.

We usually get on calls with tech support, and they are very helpful. I would rate the technical support a nine out of ten.

Positive

We worked with Nessus and Rapid7 before switching to Qualys VMDR. Qualys offers better pricing and more features compared to other tools. We did not find anything particularly missing from previous tools.

The setup is straightforward and easy. We deployed scanners and agents on all our devices, configured the network, whitelisted policy scanners, and public URLs. Testing was conducted before deploying, and it went smoothly.

We had a team of five to six people involved in the deployment aspect due to the large number of assets.

Qualys VMDR helps us be compliant, and vulnerability management is a crucial part of maintaining our organization's security, significantly contributing to ROI.

Qualys offers better pricing and is feature-packed compared to other tools.

We evaluated Nessus and Rapid7 before choosing Qualys VMDR.

I would recommend getting both VMDR and the Cloud Agent to ensure comprehensive asset coverage. Understanding the network architecture is crucial to ensure no segments are missed under Qualys. Overall, I rate Qualys a nine out of ten.

Hybrid Cloud

Other

What do you like best about the product?

Qualys VMDR provides a security configuration assessment feature that enables users to swiftly identify and correct misconfigurations, thereby enhancing their overall security posture. It also supports multiple sensors, facilitating comprehensive asset discovery and monitoring to ensure complete visibility of the IT environment. Additionally, the real-time alerting system promptly notifies users of critical vulnerabilities, allowing for quick responses and maintaining security

What do you dislike about the product?

hard to find any dislike about qualys VMDR

What problems is the product solving and how is that benefiting you?

Automate Vulnerability Management

What do you like best about the product?

It provides a complete solution for vulnerability detection and remiediation.I like its cloud approach it makes it easy to deploy without needing any requirement infrastructure.

What do you dislike about the product?

The interface little bit complicates for me at the initial stage and also complex for the new user to understand.

What problems is the product solving and how is that benefiting you?

It helps to me identify and remidiate vulnerabilities accorss our softwares quickly and efficiently. It reduces my manual effort