We performed a comparison between CoreOS Clair and Qualys VMDR based on real PeerSpot user reviews.
Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Container Security."We like the platform and its response time. We also like that its console is user-friendly as well as modern and sleek."
"Cloud Native Security offers a valuable tool called an offensive search engine."
"Our previous product took a lot of man hours to manage. Once we got Singularity Cloud Workload Security, it freed up our time to work on other tasks."
"Atlas security graph is pretty cool. It maps out relationships between components on AWS, like load balancers and servers. This helps visualize potential attack paths and even suggests attack paths a malicious actor might take."
"PingSafe offers an intuitive user interface that lets us navigate quickly and easily."
"When creating cloud infrastructure, Cloud Native Security evaluates the cloud security parameters and how they will impact the organization's risk. It lets us know whether our security parameter conforms to international industry standards. It alerts us about anything that increases our risk, so we can address those vulnerabilities and prevent attacks."
"Cloud Native Security's most valuable features include cloud misconfiguration detection and remediation, compliance monitoring, a robust authentication security engine, and cloud threat detection and response capabilities."
"We like PingSafe's vulnerability assessment and management features, and its vulnerability databases."
"CoreOS Clair's best feature is detection accuracy."
"I find Qualys VM very robust, and it's very useful for vulnerability management and patch management. The value that it brings to my environment is economies of scale. There is no limitation on adding any endpoints. You go by the rule, and it's added once another endpoint is added to our environment. It's automatically installed, and it's less work from our end. It frees up my license automatically if I don't need an endpoint or if my machine is decommissioned. I like the dashboard displays because I don't see any duplication. The most important part is vulnerability management and prioritization. Unlike Symantec, it shows the kind of vulnerability I would want to patch first. It provides a holistic view of the kind of vulnerabilities and the ones I should remediate first. I don't have to do a scan; it just brings up those critical kinds of vulnerabilities like zero-day vulnerabilities and tells me to prioritize them. You have to prioritize these vulnerabilities first and go on with the rest. The dashboard shows me the ones that have been fixed, so I don't have to complete an aging report. The user experience and the graphical interface are good. As it's user-friendly and understandable on an executive level, it brings real value. We also use this solution because it's robust and flexibile."
"It is quite easy to implement."
"Qualys VM's most valuable feature is automatic detection."
"The features that are most valuable are the identification, scan features, and the identification of vulnerabilities."
"The most valuable feature is automation."
"Intuitive and easy to use."
"The most valuable feature is that this solution is very lightweight."
"Great web application security for scanning."
"The Kubernetes scanning on the Oracle Cloud needs to be improved. It's on the roadmap. AWS has this capability, but it's unavailable for Oracle Cloud."
"PingSafe can be improved by developing a comprehensive set of features that allow for automated workflows."
"It does not bring much threat intel from the outside world. All it does is scan. If it can also correlate things, it will be better."
"There should be more documentation about the product."
"When we get a new finding from PingSafe, I wish we could get an alert in the console, so we can work on it before we see it in the report. It would be very useful for the team that is actively working on the PingSafe platform, so we can close the issue the same day before it appears in the daily report."
"Bugs need to be disclosed quickly."
"The resolution suggestions could be better, and the compliance features could be more customizable for Indian regulations. Overall, the compliance aspects are good. It gives us a comprehensive list, and its feedback is enough to bring us into compliance with regulations, but it doesn't give us the specific objects."
"Some of the navigation and some aspects of the portal may be a little bit confusing."
"An area for improvement is that CoreOS Clair doesn't provide information about the location of vulnerabilities it detects."
"The disadvantage of working with Qualys is that the graphical interface is quite outdated."
"Qualys could be improved in its overall performance compared to other vulnerability management or scanning tools."
"Finding things in management can be quite difficult."
"They should make it accessible for more operating systems."
"Qualys VM's vulnerability scan could be improved, especially the number of CVE numbers it can manage at a time."
"I do not like that all of the data is stored on the cloud."
"If anything, I would like to see the user interface modernized a bit more."
"Qualys currently does not have any features for scanning SCADA, IoT, and Industrial Control Systems."
More SentinelOne Singularity Cloud Security Pricing and Cost Advice →
CoreOS Clair is ranked 26th in Container Security with 1 review while Qualys VMDR is ranked 11th in Container Security with 77 reviews. CoreOS Clair is rated 8.0, while Qualys VMDR is rated 8.2. The top reviewer of CoreOS Clair writes "Excellent detection accuracy". On the other hand, the top reviewer of Qualys VMDR writes "Good visibility but expensive and needs better support". CoreOS Clair is most compared with JFrog Xray, Red Hat Advanced Cluster Security for Kubernetes, Snyk and Prisma Cloud by Palo Alto Networks, whereas Qualys VMDR is most compared with Tenable Nessus, Tenable Security Center, Rapid7 InsightVM, Microsoft Defender Vulnerability Management and Tenable Vulnerability Management.
See our list of best Container Security vendors.
We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
