Qualys Reviews, Ratings & Features 2026 | Gartner Peer Insights

Exposure assessment platforms (EAPs) continuously identify and prioritize exposures, such as vulnerabilities and misconfigurations, across a broad range of asset classes. They natively deliver or integrate with discovery capabilities, such as assessment tools, that enumerate exposures, like vulnerabilities and configuration issues, to increase visibility. EAPs use techniques like threat intelligence (TI) to analyze an organization’s attack surfaces and weaknesses, and prioritize treatment efforts for high-risk exposures by incorporating threat landscape, business and existing security control context. Through prioritized visualizations and treatment recommendations, EAPs help provide direction for mobilization, identifying the various teams involved in mitigation and remediation. EAPs are primarily delivered as self-hosted software or as a cloud service, and may use agents for exposure information collection.

Active

Find the top Exposure Assessment Platforms with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Exposure Assessment Platforms

Qualys Enterprise TruRisk Platform

Qualys

Engineer

Regarding Cloud Integration, this tool is flexible, being able to create connections with main security tools in the market allowing risk measurement, inventory and creating business data correlation accurately, since the integration allows to correlate data with other tools. The Threat Intelligence capability is outstanding at quickly discovering the threats and integrating the QID (Vulnerability plugin) in less than 72 hours of SLA. When performing asset discovery this tool has a remarkable detection of potential sources of data avoiding duplicates with good performance and the data discovered of the asset is visible in a human readable way to easily assign the labels and business context to implement criticity. Issue prioritization is excellent, however, the experience of performance degradation sometimes in the month could be seen during high user activity, but it was quickly fixed. The reporting piece is also a highlight  the tags allow for the creation of child tags, dashboards allow for complex customization and vulnerabilities can be labeled based on specific criteria allowing to track very specific threats in dashboards.

50M - 250M USD

3B - 10B USD

1B - 3B USD

<50M USD

30B + USD

500M - 1B USD

10B - 30B USD

250M - 500M USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

IT Associate

The application is really slow and the load time can take ages to load. The overal use of the product works especially the security questionnaire for third party risk management.

Manager, IT Security and Risk Management

I started my journey with Trurisk platform when I started exploring how we can assess risk and do risk-based prioritization rather than just relying on EPSS and CVSS alone. I found a huge gap I could find based on TOGAF approach. The platform combines assets with its criticality with active threat intelligence data that uncovers the blind spots making every small issue in core databases, networks, and applications. Unusual downgrading of vulnerabilities eventually stopped. Issue Prioritization based on the asset's criticality is a very good feature of this. The automatic correlation of Threat intel with open-source feeds saves a lot of manual effort.
Reporting specifically targeting Technical and non-technical audience caters to a value add for an enterprise.
Cloud Integration as Native APIs connects to AWS, AZURE, GCP instantly. Continuous passive network monitoring combined with active API polling provides seamless asset discovery and is excellent at catching rogue shadow IT, assets which are live for a short duration are messed up at times making them ghost assets in the database leading to license wastage.

Tenable

CrowdStrike

Microsoft

Rapid7

ServiceNow

Tanium

Zscaler

Ivanti

Dynatrace

TrendAI

Sophos

Check Point Software Technologies

Arctic Wolf

Axonius

CyberCyte

Fortress

Cyclops Security

Backline AI

Other...

Brinqa

ServiceNow (Armis)

XM Cyber

Nucleus

Vicarius

Intruder

NorthStar

ArmorCode

Alfa Group

Nanitor

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. 
The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. 
The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.


Reviews

Ratings Overview

Overall experience with

Favorable Review

Unified contextual visibility streamlines risk assessments and provides solution to your issues

Critical Review

Application Load Times Are Slow But Security Questionnaire Performs Well

Likes and dislikes about

likes

dislikes