We compared Qualys VMDR and Tanium based on our users reviews in six parameters. After reading the collected data, you can find our conclusion below:
The setup process for Qualys VMDR is generally smooth and efficient, requiring minimal effort and encountering few problems. On the other hand, Tanium's setup is more dependent on the size and complexity of the network, resulting in differing experiences for users. While some find it simple, others encounter difficulties. Additionally, Tanium's deployment involves multiple team members and can be time-consuming, taking several months to finish.
Qualys VMDR is notable for its effective prioritization system, ongoing monitoring, adaptable dashboard, and extensive vulnerability overview. In contrast, Tanium shines in its exceptional threat hunting, patch management, software inventory, and incident response capabilities.
The cost of setting up Qualys VMDR can vary depending on the desired features, with some users finding it reasonably priced or competitive. However, there are extra charges for specific features such as patch management and EDR policy compliance. Qualys VMDR has proven to be effective in minimizing cybersecurity risks and resolving vulnerabilities, resulting in a positive return on investment. In contrast, Tanium has an annual license fee and is considered expensive compared to its competitors. Despite the higher cost, users believe that Tanium provides value for money and is a strong solution.
Service and Support
The feedback on customer service and support for Qualys VMDR is varied. Some customers have praised the technical support, mentioning the availability of a global team and positive interactions. However, there are also customers who have had negative experiences and highlighted the lack of skilled support personnel. In contrast, Tanium offers a direct relationship with customers and provides an educated technical account manager. Nevertheless, some customers have mentioned that support could be enhanced, specifically in terms of reducing response delay times for issues. In summary, both products have received mixed feedback regarding their customer service and support.
Comparison Results
Based on user feedback, Qualys VMDR and Tanium were compared. Users found Qualys VMDR to be highly effective in identifying vulnerabilities and providing comprehensive reports. It was praised for its user-friendly interface and ease of use. Users also appreciated the platform's ability to automate remediation processes and its integration with other security tools. On the other hand, Tanium received positive reviews for its scalability and ability to manage large networks efficiently. Users highlighted its real-time visibility and quick response time. However, some users mentioned that Tanium's interface could be complex and required a learning curve. Overall, based on user reviews, Qualys VMDR and Tanium both offer valuable features, but Qualys VMDR seems to have an edge in terms of user-friendliness and comprehensive vulnerability management.
"Qualys VM had a recent upgrade and the newer version is supporting the cloud."
"Great web application security for scanning."
"The integrations for this solution are very good. I use a different product for virtual patching of vulnerabilities and Qualys integrates well with that product."
"The initial setup was good. We didn't have any problems with it."
"I like Qualys because it is a very complete product, more so than Tenable."
"This is one of the best products I have worked with so far. I like the power of Qualys, and it's a better solution because you can scan a compact file, a BIT file, or batch files. The product already knows what's happening inside, and you don't need to expand the package. Tenable will do the same thing, but you need to have a package issuance claim. With Qualys, we can immediately understand the file, even a compact file. If there's some kind of discovery or incident, you will know what happened in the environment."
"Qualys VM has allowed us to know the vulnerabilities we need to prioritize based on the threat levels and the possible impact if there's an intrusion."
"The most valuable feature is the certificate management."
"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."
"I'm not so familiar with the tool but I like the interaction of the console to the picture. Patching is the primary model I have been focusing on for the last couple of weeks. So I have created a proof of concept environment and have been checking the available features."
"The interrogation piece was the most valuable feature because it was very detailed."
"The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps."
"Tanium’s linear-chain architecture is valuable."
"Tanium's most valuable feature is its instant discovery aspect."
"The security features are very valuable."
"I would say Tanium is the best tool for vulnerability management."
"I would like to see more accuracy in detections, better reporting capabilities, and better dashboard download capabilities."
"Certain integration factors between different options could be improved."
"They have integrated with other third parties, but it is still not viable."
"Make some minimal dashboard improvements."
"Qualys VM's vulnerability scan could be improved, especially the number of CVE numbers it can manage at a time."
"Qualys currently does not have any features for scanning SCADA, IoT, and Industrial Control Systems."
"There needs to be better documentation."
"The reporting in this solution can be improved."
"It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model."
"They could improve the UI."
"The solution can give a lot of false positives."
"Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time."
"The most painful thing is the interface. It's a bit unclear sometimes."
"Most of the time, agent-relative issues have to be more equipped with self-healing features. At times, the agent is there, but for some reason, it doesn't report a status. It gives certain problems that are obviously agent-based."
"We had some issues with the solution's OS upgrade."
"The reporting could be improved."
Qualys VMDR is ranked 3rd in Risk-Based Vulnerability Management with 77 reviews while Tanium is ranked 36th in Endpoint Protection Platform (EPP) with 15 reviews. Qualys VMDR is rated 8.2, while Tanium is rated 7.4. The top reviewer of Qualys VMDR writes "Good visibility but expensive and needs better support". On the other hand, the top reviewer of Tanium writes "Useful tool for vulnerability management and deploying applications, needing improvement in its OS upgrade". Qualys VMDR is most compared with Tenable Nessus, Tenable Security Center, Rapid7 InsightVM, Microsoft Defender Vulnerability Management and Wiz, whereas Tanium is most compared with CrowdStrike Falcon, Microsoft Defender for Endpoint, Microsoft Configuration Manager, ServiceNow Discovery and Tenable Security Center. See our Qualys VMDR vs. Tanium report.
We monitor all Risk-Based Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.