Free Trial
$0
trial
Qualys advertises a free trial. Trial duration and included applications are not publicly specified.
Check current pricing →Q
Qualys Cloud Platform
Qualys Cloud Platform is a cloud-based cybersecurity suite for asset discovery, vulnerability management, compliance, cloud security, remediation and cyber risk prioritization.
Editorial overview
Aggregated Overview
The platform combines asset inventory, vulnerability management, compliance, cloud security, application security, remediation and threat response. Public pricing is quote-based, while G2 reports a 4.3 out of 5 average rating from 256 reviews.
This profile combines documented product information and independent evidence where available. It is not a hands-on test unless TechZella explicitly identifies one.
Qualys Cloud Platform Decision Snapshot
A quick way to understand who this product may suit, where its limits matter, and which facts are most relevant before you compare alternatives.
Platforms
Android, API, AWS, Cloud, Google Cloud, iOS
TechZella assessment
8.3/10
Overview
Qualys Cloud Platform is a multi-application security and compliance environment delivered primarily as software as a service. It provides shared asset data, scanning services, cloud sensors, agents, analytics and workflow capabilities across enterprise IT environments.
The current platform groups capabilities under the Enterprise TruRisk Platform. Its coverage includes vulnerability and configuration management, compliance, asset management, remediation, threat detection and response, cloud security, application security and cyber risk operations.
Qualys supports on-premises infrastructure, endpoints, servers, public and private clouds, containers, mobile devices and web applications. The platform can use cloud agents, virtual scanners, network scanners, cloud connectors and APIs to collect security data.
Qualys Cloud Platform Pros & Cons
Pros
- Broad security coverage across vulnerability, compliance, cloud, application and endpoint use cases.
- Shared asset and risk data can support consolidated security operations.
- Supports major public cloud providers and a large integration catalog.
- REST APIs and connectors support automation and external workflows.
- Cloud agents can collect continuous asset and security data.
Cons
- Public pricing is not transparent.
- The platformu2019s breadth can increase configuration and training requirements.
- Feature availability depends on separately selected applications and subscriptions.
- Organizations needing one narrowly focused tool may not use the full platform scope.
Security & Privacy
For security-sensitive software, TechZella focuses on documented architecture, authentication, data handling, deployment and privacy details that can affect a buying decision. This is product research, not an independent security audit.
Security posture at a glance
| Deployment model | Cloud-based SaaS |
|---|
Security claims are presented only when supported by documented sources. The presence of this section does not constitute a penetration test, certification or independent security audit.
Qualys Cloud Platform Pricing & Plans
Cloud Platform Subscription
Quote-based
annual subscription
Pricing depends on selected Cloud Platform applications, network addresses, web applications and user licenses.
Check current pricing →Pricing may change. Verify current plans on the vendor's website.
Qualys Cloud Platform Features
Asset Management
- Global asset inventory
- CyberSecurity Asset Management
- External attack surface management
- Cloud asset discovery
- Hardware, software and configuration metadata
Vulnerability and Configuration Management
- Vulnerability Management, Detection and Response
- Network and agent-based scanning
- Configuration assessment
- Risk-based prioritization
- Remediation workflows
- Patch management
Compliance
- Policy compliance assessment
- Predefined policies and controls
- Compliance reporting
- File integrity monitoring
- Support for regulatory and industry frameworks
Cloud Security
- Cloud security posture management
- Cloud workload protection
- Cloud detection and response
- Container and Kubernetes security
- Infrastructure-as-code security
- Cloud infrastructure entitlement management
- SaaS security posture management
Application and Supply Chain Security
- Web application scanning
- API security testing
- Software composition analysis
- Container scanning
- CI/CD security integrations
Threat Detection and Response
- Endpoint detection and response
- Cloud detection and response
- Threat intelligence correlation
- Risk operations workflows
Automation and Integration
- REST APIs
- Cloud connectors
- ServiceNow integrations
- Jira integrations
- Splunk integrations
- Microsoft Sentinel integration
- Jenkins and Azure DevOps integrations
- CSV and webhook connectors
Alternatives
Comparable products include Tenable One for exposure management and vulnerability operations, Rapid7 InsightVM for vulnerability risk management, Microsoft Defender for Cloud for cloud and workload protection, Palo Alto Networks Prisma Cloud for CNAPP capabilities, and Wiz for cloud exposure management.
These products differ in architecture, licensing, cloud-native coverage, endpoint capabilities, application security depth and integration models. Product selection should reflect the organization’s existing security stack and required deployment scope.
Qualys Cloud Platform Specifications
| Deployment model | Cloud-based SaaS |
|---|---|
| Primary interface | Web application |
| API | REST APIs available across platform applications |
| Supported cloud providers | Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure |
| Sensors | Cloud Agents, virtual scanners, network scanners, passive scanners and cloud connectors |
| Endpoint operating systems | Windows, Linux, macOS, Android and iOS support varies by agent and module |
| Integrations | ServiceNow, Jira, Splunk, Microsoft Sentinel, IBM QRadar, AWS, Azure, GitHub, GitLab, Jenkins, Azure DevOps, Bamboo and TeamCity |
| Pricing model | Quote-based subscription |
| Free trial | Available; duration not publicly specified |
| Service model | Multi-tenant cloud platform with optional private cloud availability |
Our evidence-based assessment
TechZella Score
A proprietary editorial score based on product capabilities, usability, value, performance, support and user sentiment evidence.
8.3/10Moderate confidence
The platform combines asset inventory, vulnerability management, compliance, cloud security, application security, remediation and threat response. Public pricing is quote-based, while G2 reports a 4.3 out of 5 average rating from 256 reviews.
Methodology v1.0. The assessment weighs feature coverage (25%), ease of use (15%), value for money (20%), performance (15%), support (10%) and user sentiment (15%), using researched product evidence and verified review evidence where available. It is a TechZella editorial assessment, not a direct user-review average.
Community feedback
Reviews
No reviews yet. Be the first to share your experience.
Write a Review
Please log in to submit a review.
FAQ
Is Qualys Cloud Platform cloud-based?
Yes. Qualys delivers the platform through a cloud service, with agents, scanners, connectors and other sensors collecting data from protected environments.
Does Qualys provide an API?
Yes. Qualys provides REST APIs across platform applications, including cloud security, connectors, reporting, inventory, remediation and user access management.
Which cloud providers are supported?
Qualys documentation identifies Amazon Web Services, Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure as supported cloud connector providers.
Does Qualys offer a free trial?
Yes. Qualys advertises a free trial, but the public pricing page does not state a standard trial length.
What integrations are available?
Available integrations include ServiceNow, Jira, Splunk, Microsoft Sentinel, IBM QRadar, AWS, Azure, GitHub, GitLab, Jenkins, Azure DevOps, Bamboo, TeamCity and other security and IT operations tools.
Who is Qualys Cloud Platform best suited for?
It is best suited to organizations that need several connected security and compliance functions, especially enterprise, government and regulated environments.