Qualys Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines cloud web application and API protection (WAAP) as security solutions designed to protect web applications and APIs from different types of attacks, irrespective of the hosting location. Delivered as a cloud-based service, core capabilities are web application firewalls (WAF), distributed denial of service (DDoS) mitigation, protection against advanced API attacks and automated traffic management (bot management).

Active

Find the top Cloud Web Application and API Protection Platforms with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Cloud Web Application and API Protection

Qualys Web Application Firewall (Legacy)

Qualys

ASSISTANT MANAGER, IT SECURITY

Qualys Web Application Firewall (WAF) enables rapid remediation of active vulnerabilities with a single click. This one-click approach simplifies threat response for security teams, even those without extensive knowledge of the underlying code or infrastructure. The WAF continuously monitors web traffic and firewall operations, offering real-time visibility and actionable insights. These features empower security teams to make informed decisions and take appropriate measures to mitigate risks effectively

1B - 3B USD

50M - 250M USD

250M - 500M USD

3B - 10B USD

Gov't/PS/ED 5,000 - 50,000 Employees

500M - 1B USD

10B - 30B USD

30B + USD

Information Security Analyst

We use Qualys for Web Application Scanning and Vulnerability management of servers. Overall experience is very nice as its GUI, user experience and reporting is excellent. It classifies the vulnerabilities in an excellent manner from scale 1 to 5. Color representation of vulnerabilities also gives an idea of severity level.

IT DEPUTY MANAGER

Qualys Web Application Firewall is engineered to protect web applications from advanced and emerging threats, effectively mitigating complex attacks. Upon implementing Qualys WAF, SQL injection, XSS, and other types of attacks were successfully thwarted, leading to a significant decrease in security incidents. Additionally, it enables users to create specific rules customized to their unique security requirements, such as setting up rules to block traffic from particular IP ranges known to be sources of malicious activity.

Amazon Web Services (AWS)

Cloudflare

Citrix

Microsoft

Huawei

Barracuda

Akamai

Fortinet

Alibaba Cloud

Other...

Oracle

Broadcom (VMware)

Penta Security

LevelBlue

Broadcom (Symantec)

Google

Positive Technologies

Fortra (Alert Logic)

Array Networks

Ergon

Thales Group (Imperva)

Indusface

ZenEdge

F5 (NGINX)

Tencent Cloud

Fastly

Brainstorm Force

NetScaler

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. 
The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. 
The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.


Reviews

Ratings Overview

Overall experience with

Favorable Review

Qualys WAF: Your Effective Response to Complex Cyber Attacks

Critical Review

Basic Reporting, Scanning and vulnerability identification is excellent.

Likes and dislikes about

likes

dislikes