Get a recommendation
Tell us your requirements and our advisors will help you compare and shortlist the best-fit options — free and unbiased.
A real human, fast
Someone on our team replies within one business day — no bots, no ticket queue.
Routed to the right team
Buying, selling, partnering, or investing — you reach the people who can actually help.
Independent & unbiased
No pushy sales. Just honest guidance grounded in the ecosystem.
Tailored to your context
Tell us what you need and we shape the next steps around it.
Who are you? Pick the option that fits best.
Cloud platform for security and compliance
Qualys is a cloud-based security and compliance platform best known for VMDR (Vulnerability Management, Detection, and Response), providing vulnerability management, asset discovery, threat prioritization, patch management, and compliance across on-premise, cloud, and endpoint environments. Its cloud-agent architecture gives continuous visibility into an organization's security posture.
The platform spans a broad suite - vulnerability management, cloud security posture, web application scanning, policy compliance, and its TruRisk risk-scoring model - delivered from the cloud with lightweight agents. Qualys focus on continuous, scalable, cloud-native scanning and its compliance capabilities make it a staple for enterprise security and audit teams.
Qualys VMDR is priced per asset per year, commonly starting around 199 to 250 dollars per asset (with volume discounts at scale) and packaged in tiers - Essentials, Professional, and Enterprise (the full TruRisk platform) - sold as annual subscriptions with quote-based, non-public pricing. Aimed at enterprise security and compliance teams, it competes with Tenable, Rapid7, Wiz, CrowdStrike, and Cloudflare.
Pricing Model
quote
Starting Price
Contact vendor
Free Options
Free trial
| Feature | Essentials | Professional | Enterprise |
|---|---|---|---|
| Custom quote | — | ||
| Asset discovery | — | — | |
| Core vulnerability management | — | — | |
| For small teams | — | — | |
| Per-asset pricing | — | — | |
| Threat prioritization | — | — | |
| Compliance | — | — | |
| Integrations | — | — | |
| Advanced features | — | — | |
| Custom pricing | — | — | |
| Full TruRisk platform | — | — | |
| Cloud security | — | — | |
| Web app scanning | — | — | |
| Enterprise scale | — | — |
Other
DevOps
Communication
Missing an integration?
API Types
SDK Availability
Verify SDK availability in vendor's documentation.
Developer Features
No reviews yet. Be the first to review Qualys.
Have a question about Qualys? Ask the community.
Compliance Standards
SOC 2 Type II
EnterpriseISO 27001
EnterpriseGDPR Compliant
GlobalHIPAA
HealthcarePCI DSS
FinanceCCPA
PrivacyFedRAMP
GovernmentCSA STAR
CloudDeployment & Data
Data Residency Options
Verify with vendor for your specific region requirements.
Vulnerability management and exposure security
Cloud security platform (CNAPP) for the entire cloud environment
Cloud-native endpoint protection and XDR (Falcon platform)
Connectivity cloud: CDN, DDoS protection, security, and edge compute
