Qualys Cloud Platform

Qualys Cloud Platform is a multi-application security and compliance environment delivered primarily as software as a service. It provides shared asset data, scanning services, cloud sensors, agents, analytics and workflow capabilities across enterprise IT environments.

The current platform groups capabilities under the Enterprise TruRisk Platform. Its coverage includes vulnerability and configuration management, compliance, asset management, remediation, threat detection and response, cloud security, application security and cyber risk operations.

Qualys supports on-premises infrastructure, endpoints, servers, public and private clouds, containers, mobile devices and web applications. The platform can use cloud agents, virtual scanners, network scanners, cloud connectors and APIs to collect security data.

Core capabilities include continuous asset inventory, vulnerability detection, risk-based prioritization, configuration assessment and remediation workflows. Qualys also provides compliance policies, reporting, patch management and file integrity monitoring.

Cloud security capabilities cover cloud security posture management, cloud workload protection, cloud detection and response, container and Kubernetes security, infrastructure-as-code security, entitlement management and SaaS security posture management.

The platform includes web application and API scanning, software composition analysis, endpoint detection, external attack surface management and integrations for security operations, ticketing, IT service management and continuous integration pipelines.

Qualys does not publish fixed public prices for the Cloud Platform. Official pricing depends on the selected applications, network addresses, web applications and user licenses.

Qualys offers a free trial through its website. The public pricing page does not specify a standard trial duration. Subscriptions include access to Cloud Platform applications, Global AssetView, unlimited scans, unlimited inventory Cloud Agents, training and support, subject to the applicable subscription terms.

Pros:

• Broad coverage across vulnerability management, compliance, cloud, application and endpoint security.
• Shared platform services can reduce the need to operate multiple security consoles.
• Supports AWS, Azure, Google Cloud and Oracle Cloud Infrastructure connectors.
• Provides REST APIs, data connectors and integrations with tools such as ServiceNow, Jira, Splunk, Microsoft Sentinel, Jenkins and Azure DevOps.
• Cloud agents support continuous data collection and multiple security modules.

Cons:

• Pricing is not transparent and generally requires a sales process.
• The broad module structure can require product-specific configuration and training.
• Capabilities and licensing vary by application, sensor and subscription selection.
• Organizations seeking only one narrow security function may find the platform broader than necessary.

Comparable products include Tenable One for exposure management and vulnerability operations, Rapid7 InsightVM for vulnerability risk management, Microsoft Defender for Cloud for cloud and workload protection, Palo Alto Networks Prisma Cloud for CNAPP capabilities, and Wiz for cloud exposure management.

These products differ in architecture, licensing, cloud-native coverage, endpoint capabilities, application security depth and integration models. Product selection should reflect the organization’s existing security stack and required deployment scope.

Is Qualys Cloud Platform cloud-based?
Yes. Qualys delivers the platform through a cloud service, with agents, scanners, connectors and other sensors collecting data from protected environments.

Does Qualys provide an API?
Yes. Qualys provides REST APIs across platform applications, including cloud security, connectors, reporting, inventory, remediation and user access management.

Which cloud providers are supported?
Qualys documentation identifies Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure as supported cloud connector providers.

Does Qualys offer a free trial?
Yes. Qualys advertises a free trial, but the public pricing page does not state a standard trial length.

What integrations are available?
Available integrations include ServiceNow, Jira, Splunk, Microsoft Sentinel, IBM QRadar, AWS, Azure, GitHub, GitLab, Jenkins, Azure DevOps, Bamboo, TeamCity and other security and IT operations tools.

Who is Qualys Cloud Platform best suited for?
It is best suited to organizations that need several connected security and compliance functions, especially enterprise, government and regulated environments.