What Qualys is
Qualys offers just about every vulnerability scanner you could want from a single vendor - from cloud to on premise to code. They have great vulnerability insights and scanning capabilities in a holistic place, but the platform UX can be difficult compared to more specialized vendors. The vendor site is www.qualys.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Qualys covers
Qualys is in the catalog for these capabilities. Categories: Endpoint Management, CSPM, DAST, and Vulnerability Management. Catalog tags: Hands-on and Best for Enterprise.
How to evaluate Qualys in a security program
Use Qualys as a stack candidate, not as diligence evidence. The oneNorma score for Qualys is 6/10 (percentile 83). If the real gap is in Endpoint Management, CSPM, DAST, and Vulnerability Management, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.qualys.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
