I simultaneously work with Tenable and Rapid7, along with Qualys Web Application Scanning. We do not procure the licensing for these solutions. Instead, clients come to us and ask us which solution is best for them. We review their current architecture and define the best solution for them. Later, they purchase the license, and we configure it.

I'm aware of Fortify On Demand but haven't used it. Our company only holds licenses for Fortify SaaS and DaaS.

We have used Veracode previously and we are currently still using it.

Previously, I used CA Identity Solutions by Broadcom, which had easier integration, more options for MFA, and biometric options.

I have used many other tools. In some cases, I prefer other tools because they give better visibility into the vulnerabilities. In general, Qualys is good.

I would say Qualys is on the better side. It's more about the performance and the quality of the product because it's been around for a long time.

I would say Qualys is on the better side. It's more about the performance and the quality of the product because it's been around for a long time.

I have also used the Nexus Vulnerability Scanner and it reports fewer false positives.

We did not previously use a different solution.

Don’t know what, if anything, preceded Qualys at Symantec.

We switched due to there being a high number of false positives.

I also checked Rapid7 for internal scanning. I picked Qualys for a specific use. It's a SaaS service. We use it to audit the security level of my customer's internet. 

We were and still are using webMethods Professional. We use both in tandem to do manual testing. That is our process of doing things.

I have used Nessus, Burp Suite, and IBM AppScan. Cost- and functionality-wise, I find Burp Suite the best of them all. AppScan is good, but very expensive and reports more false positives.

We've never used a different solution.

I used Rapid7 NeXpose in another shop.

This would depend on the clients' requirements.