Qualys WAF Reviews

Qualys WAF impresses with its robust web application security features, seamlessly shielding against various threats. The intuitive interface makes configuration a breeze, enhancing user experience. Its comprehensive reporting provides valuable insights, ensuring a reliable defense for online assets.

In my experience with Qualys WAF, I appreciate its robust security features, but there's room for improvement in terms of customization options, especially for tailored configurations. The pricing, though justified for the features, might pose a challenge for smaller businesses. Despite occasional latency during peak usage, its overall user-friendly interface has contributed to a positive web application security experience.

Qualys WAF efficiently tackles web application vulnerabilities, mitigating the risk of cyber threats and safeguarding our digital assets. Its proactive approach enhances our security posture, ensuring a resilient and protected online presence. Which is a plus

Qualys WAF is an effective tool to scan online applications

I dont find any dislike about WAF so far

Help protect users and applications for any intrusion and suspicious virus

It helps an IT administrator to define the security policies for browsing according to the user's needs. The dashboard made it easy to view the network traffic status and security posture of the system. And provides visibility into the network traffic and helps in monitoring the security events in the device. The Qualys WAF provides after-sales customer support in integrating and implementing this security component into our system.

The user interface is good but needs to be used to it. Customer support is good but resolution takes a few business days to be resolved. It would be great if a flexible pricing option is given.

It helps our devices be immune against OWASP's top 10 web security risks. It acts like a double barrier from cyber-attacks because normally we have firewalls and having a WAF firewall is an add-on to IT security. Providing visibility to network traffic helps us to monitor and report suspicious connections. It comes with predefined rules which reduce the security consultant's work.

I like the features such as it covers a wide range of web application vulnerabilities and threats, It's automatically updates its rules and signatures to keep up with the latest threats which gives the protection from latest cyber threats and it is a cloud-based paltform.

My only dislike about Qualys WAF that sometimes it can block legitimate traffic, which can disrupt website functionality.

Its benefiting by protecting websites and web applications from various threats, including SQL injection, cross-site scripting (XSS), and DDoS attacks.

Qualys WAF provides robust threat protection against OWASP top 10 vulnerabilities, scalable to handle high traffic with real-time monitoring and customizable rules. It supports API security, SSL/TLS offloading, compliance standards, and offers user-friendly interfaces with automated updates for ongoing protection.

Complex Configuration: Setting up Qualys WAF can be intricate, demanding expertise.

Prevention of DOS/Intrusion attacks against web facing servers.

Learning mode helped us shape our Security Profile and it benefited by providing great security against threats.

Monitoring capabilities, ease querying system, threat visbility, seamless integration with devops enviroments and APIs

Performance of the application while using multiple integrations at once, data accuracy tools some need to be improved

Enforce web applications firewall for connected services,

Visualize impact and threats on resources,

Extract metrics for security compliance reports.

The GUI access to the tool is very helpful for understanding the various features along with colour codes defined for severity levels. This tool also helps in checking the security rules or policies view with more details.

The tools is good but the support from the vendor is not that great during the break-fix issues. Also, during loading the scripts, the server gives error and script fails to work.

The application helps in accessing the firewall using GUI feature where it makes easier for application to improve the security of web applications with options of integrating with other tools. It provides reporting options with more attributes and this is integrated with SIEM server.

WAF has several advantages over using a network firewall for web application security. First, a WAF can provide more granular and specific protection, one i like most is IP based filtering and auto detenction of common attacks like sql injection based on intelligence.

I like to see Qualys WAF as cloud agnostic solution if its not already as i was looking for google cloud which task is on hold for so just a thought provider want to look.

applications/web HTTP security. It is helping us a lot. I have some other projects in pipeline where i can recommend this solution.

Feature that I like is the ability to customize WAF rules, which is useful for handling specific security requirements or for addressing false positives.

Pricing of the tool could be competitive as there are other options as well but doesnt match the repo of Qualys WAF.

I have been using Qualys WAF for the past 6 months as a security engineer and I have been extremely impressed with the tool. The user interface is intuitive and easy to navigate, making it simple to set up and manage web application firewall policies. The tool also provides a wealth of information and reporting options, allowing me to quickly identify and address potential threats.

One of the key features that I appreciate about Qualys WAF is its ability to automatically identify and block common web attacks, such as SQL injection and cross-site scripting. This has greatly reduced the workload for my team and has helped to improve the security of our web applications.

The tool also provides various options for integration with other security tools, including SIEM, which makes it easy to manage security information and event management.

the ease of use of the tool. Also, it comes with pre-defined rules which are handy to get started. It protects your web application from the day-1.

Plus point, the support is good.

a small dislike, some automated patching should be there which will help the analyst to save time. rest is all fine. a good product.

it is making web application scanning and vulnerability mgmt easier. Overall a nice GUI experience. It also helps in gaining visibility around the traffic flow in your organization.