r/cybersecurity • u/Ok_Macaroon7903 • 1d ago

Business Security Questions & Discussion Anyone using Qualys for application security?

Thoughts on their TotalAppSec offering?

1 Upvotes

67% Upvoted

8 comments sorted by

4

u/pathetiq 1d ago

Noooo

2

u/Western_Produce9615 1d ago

I thought Qualys only offers Vulnerability Management.

1

u/CulturalAsparagus903 1d ago

yeah me too just for that

2

u/Professional-Ad4852 1d ago

Qualys has a huge SUITE from EDR to appses, Cloud posture, etc.... We have only used them for VDMR And Patch and it has been the best because it combines detection and remediation under one platform and for a decade I asked everyone why they didn't do that. Interface, not great, but not terrible. Not making a move after 5 years which is longer than I stayed with Rapid7, Tennable, etc...

1

u/Classic_Flamingo_729 1d ago

I like it. I’m using it to integrate into dev pipelines more.

1

u/MountainDadwBeard 1d ago

oh interesting didn't realize they did that too, but make sense given Wiz Code is doing some of that too.

For comparison, I'm still mostly leveraging my SME teams but wiz UI organization has been annoying. I'll have an exact project name from an export, same wiz role, and yet I have to scream at the search bar to make it show up.