Qualys WAS Reviews

Qualys Web Application Scanning is highly regarded for its cloud-based, comprehensive scanning capabilities, low false positives, seamless integration, and user-friendly interface.

learning curve for new users, and occasional limitations in customization options.

Scanning web apps for latest vulnerability and zero days.

What I like the best about Qualys WAS is its user-friendly interface and the result it outputs after the scan. The way the results were displayed was intuitive and is really helpful when fixing the security issues.

It's hard to acquire credentials or register to the application. Once you accessed the credentials link and you accidentally close it, then you won't be able to access it again, so be careful.

We were able to resolve the issues that prevents us from getting the PCI DSS certification for our application. It benefitted us greatly as we don't have to under go tedious work to become PCI-DSS certified.

Qualys WAS offers an extensive range of scanning options, allowing us to perform both automated and manual scans. This versatility enables us to tailor the scanning process to suit our specific security needs.

Although the interface is user-friendly, new users may encounter a slight learning curve when navigating through the various features and settings. Improved onboarding resources or tutorials could help address this issue.

Qualys WAS solves several critical problems related to web application security, and its benefits are significant for cybersecurity professionals and organizations. Qualys WAS helps identify vulnerabilities and security weaknesses within web applications. By scanning websites and web applications comprehensively, it proactively uncovers potential threats that could be exploited by attackers.

easy to use platform, very helpful to learn about vulnerability management;etc.

if there was free trail for longer period, especially for students it would be helpful so that thry can explore the platform and products more better.

helped to identify the vulnerabilities for the clients projects websites.

It's very easy to use and provides centralized management to keep attackers away, securing web applications and APIs. It helps to secure my modern web application and APIs across cloud-native and on-premises architecture.

Expensive, Qualys is not a cheap solution, and due to being the best application in the industry, this can be a barrier to adoption for some organizations like small organizations. However, for medium and large-scale organizations, it's a perfect fit.

It helps me to identify vulnerabilities in web applications, it helps me to identify a wide range of vulnerabilities including both unknown and known ones, and also helps me to prioritize vulnerabilities according to score and remediation for that.

Best part is that quick updates their vulnerability databases and thus being sure you are updated to the latest threat detection signatures available/discovered.

The user experience great

The customer support flawless

WAS software was easy to use

Qualys WAS is a module of the Qualys tool that proves to be powerful, practical, and simple to use, achieving great potential for vulnerability scanning and providing an excellent experience in the triage and tracking of vulnerabilities.

The only part of Qualys WAS that bothers me is the false-positive vulnerabilities it presents in some cases because I believe it is not possible to change the detection quality in the tool, as OpenVAS provides, for example.

The Qualys WAS resolves a large part of the vulnerability management cycle currently, providing everything from the configuration of scan templates to the final part of reports and vulnerability triage.

It is very user friendly as compared with compititor tools.

To my personal experience i don't find anything to complain about.

Application security is prime concern now a days. With help of Qualys WAS able to perform quick DAST scans and take immediate actions as appropriate.

The user experience was great, the customer support was flawless, WAS software was easy to use, and the certification offered by Qualsy was beneficial.

The pricing is a bit expensive, and saas offering is costly for small to medium-sized organisations. The VMDR solution is a great offering it is worth the price.

All the vulnerability assessment and Management problems were handled using Qualy's set of tools and the patching tools offered by qualys is one of the market's best.

Their detection engine is quite well and I have personally discovered a couple of vulnerabilities that were not easy to identify manually. Their vulnerability DB is always updated with the latest 0-days detections.

They should come up with a free trial option.

It helps identify security vulnerabilities and that helps web app owners to secure their applications.