We performed a comparison between Qualys VMDR and RiskIQ Illuminate based on real PeerSpot user reviews.
Find out what your peers are saying about Tenable, Qualys, Rapid7 and others in Risk-Based Vulnerability Management."The integrations for this solution are very good. I use a different product for virtual patching of vulnerabilities and Qualys integrates well with that product."
"It's really beneficial for scanning and interacting with the agent."
"It's very configurable to adjust impact to systems."
"Great web application security for scanning."
"The reporting functionality is great."
"The biggest benefit is from a security operations perspective, where we are able to drive our security posture upwards by remediating any discovered vulnerabilities."
"Monitors workstations and servers for vulnerabilities and creates reports."
"It is very easy to use and there are lots of options. We can usually easily go through it and all of the things we want to configure, and we can configure everything to our specifications very easily."
"The solution is stable with 12 years of established historical data."
"When tested on Zero day, there were errors."
"Qualys VM's machine learning and artificial intelligence features could be improved."
"It's quite complex on the way it is set up, so it takes a fair bit of time in order to get your head around it in order to deploy it. Once you've deployed it, then you're never confident on the versions of the browsers and the SSL certificates, etc. You have to always go back into Qualys and check."
"Its integration with ServiceNow and other similar products is complicated and can be improved. It should also have virtual batching. They should support more standards and compliance requirements and more customizations. For policy compliance, they can add the standards required by the countries in the Middle East. Each country generates its own standards and frameworks, and those frameworks should be there in all products, not only in Qualys. The market here is huge, especially in the cybersecurity field. Qatar has a framework for Qatar 2022, and each and every company in the public or private sector has to follow the Qatar 2022 framework."
"They're still evolving their platform in terms of reporting capabilities."
"The IoT scan is not great."
"What we have found is that the solution is not closely tied with the patch management. It is okay with newer ones, like Windows 10 machines; it gives the correct patch. But for Windows 7 or Windows Server 2008, it does not give us the correct patch so we have to manually identify the patches. This is a major problem."
"I would like to see this solution more developed and competitive in the Cloud space."
"A low-cost service to evaluate the risk score of a supply chain would be very helpful."
Earn 20 points
Qualys VMDR is ranked 3rd in Risk-Based Vulnerability Management with 77 reviews while RiskIQ Illuminate is ranked 13th in Attack Surface Management (ASM). Qualys VMDR is rated 8.2, while RiskIQ Illuminate is rated 0.0. The top reviewer of Qualys VMDR writes "Good visibility but expensive and needs better support". On the other hand, the top reviewer of RiskIQ Illuminate writes "Able to discover unpatched servers, offers good stability, and scales very well". Qualys VMDR is most compared with Tenable Nessus, Tenable Security Center, Rapid7 InsightVM, Microsoft Defender Vulnerability Management and Tenable Vulnerability Management, whereas RiskIQ Illuminate is most compared with Microsoft Defender External Attack Surface Management, Recorded Future and ZeroFOX.
We monitor all Risk-Based Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.