Qualys VMDR (Vulnerability Management, Detection, and Response)

Starter packs for up to 32 assets begin around $1,995/year; volume enterprise pricing quoted per IP/agent.

Qualys offers a portfolio covering coordinating controls, evidence and risk decisions, assessing cloud exposure or protecting running workloads, identifying and prioritizing security weaknesses and finding or addressing weaknesses in software. The entries in this catalog include Policy Compliance, TotalCloud, VMDR and Web Application Scanning. Policy Compliance focuses on configuration compliance assessment and reporting. TotalCloud focuses on cloud posture assessment and workload risk visibility. VMDR focuses on vulnerability management and remediation prioritization. When reviewing Qualys, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Policy Compliance: the catalog lists Control monitoring, Audit preparation, Policy and task coordination. - TotalCloud: the catalog lists Cloud security posture management, Container security, Cloud compliance checks. - VMDR: the catalog lists Asset discovery, Vulnerability scanning, Risk-based prioritization. - Web Application Scanning: the catalog lists Dynamic application security testing, Developer workflow integration, CI/CD integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.